Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-3927 EUVD-2025-13222GHSA-qph7-xc8r-fqmj

CVE-2025-3927

Published May 2, 2025 · Updated May 12, 2025 · Assigned by certcc

Description

Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices.

Affected products

VendorProductAffectedFixed
Digigram PYKO-OUT 1.0 —

References