PT-2024-21117 · Wyrestorm · Wyrestorm Apollo Vx20

Hyp3Rlinx · Published 2024-03-26 · Updated 2024-03-27 · CVE-2024-25734

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WyreStorm Apollo VX20 versions prior to 1.3.58

Description An issue was discovered where the TELNET service prompts for a password only after a valid username is entered. This might make it easier for remote attackers to enumerate user accounts.

Recommendations For versions prior to 1.3.58, update to version 1.3.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the TELNET service to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-25734

Affected Products

Wyrestorm Apollo Vx20

References · 8

• 🔥 http://packetstormsecurity.com/files/177081 · Exploit
• 🔥 https://exploit-db.com/exploits/51814 · Exploit
• https://osv.dev/vulnerability/CVE-2024-25734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25734 · Security Note
• https://twitter.com/CVEnew/status/1772815188791812506 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Feb/9 · Note
• https://hyp3rlinx.altervista.org · Note
• https://twitter.com/VulmonFeeds/status/1772862608585990172 · Twitter Post