60
CVE-2025-3927
- CVSS 3.1
- 9.8 critical
- EPSS
- <1%p45
- Published
- ·
- Modified
Description · NVD
Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices.