CVE-2025-3927

Digigram's PYKO-OUT audio-over-IP AoIP web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices...

CVE-2025-3927

creationtimestamp| type| source ---|---|--- 2025-05-02 15:17:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14502 2025-05-02 15:59:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo73xhhtkod2 2025-05-02 18:01:00+00:00| seen|...

CVE-2025-3927

Digigram's PYKO-OUT audio-over-IP AoIP web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices...

CVE-2025-3927

CVE-2025-3927 concerns Digigram PYKO-OUT AoIP, where the web-server defaults to no password. This allows any attacker on the target network (e.g., at the device’s 192.168.0.100 address) to connect and take control of the device, potentially pivoting to connected network or hardware components. Th...