CVE-2024-25735

WyreStorm Apollo VX20 devices prior to version 1.3.58 expose cleartext credentials via an HTTP GET on the SoftAP router endpoint /device/config. This is an information-disclosure/authentication- bypass issue affecting the web interface/config component; remote attackers can retrieve credentials w...

CVE-2024-25735

creationtimestamp| type| source ---|---|--- 2024-02-14 08:56:57+00:00| seen| https://t.me/ctinow/184476 2024-02-16 12:07:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6613 2024-02-16 15:34:44+00:00| published-proof-of-concept| https://t.me/codeb0ss/1377 2024-02-18 12:31:01+00:0...