← Back to browse · API

CVE-2024-25735

Severity

CRITICAL

CVSS

9.1

EPSS

0.50622

Risk score

54.12

CISA KEV

No

PoC

No

Published

2024-03-27

Modified

2025-11-04

First seen

2026-08-07

Aliases

EUVD-2024-23045, GHSA-R2F8-JCM8-G23C

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-23045

Description

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.

References