Full title: WyreStorm Apollo VX20 Account Enumeration Vulnerability 
Category: web applications
Platform: hardware
An issue was discovered on WyreStorm Apollo VX20 devices prior to version 1.3.58. The TELNET service prompts for a password only after a valid username is entered. Attackers who can reach the Apollo VX20 Telnet service can determine valid accounts allowing for account discovery.

# 0day.today @ http://0day.today/