CVE-2025-3927

CVE-2025-3927 concerns Digigram PYKO-OUT AoIP, where the web-server defaults to no password. This allows any attacker on the target network (e.g., at the device’s 192.168.0.100 address) to connect and take control of the device, potentially pivoting to connected network or hardware components. Th...