WyreStorm Apollo VX20 devices before version 1.3.58 have a vulnerability in their TELNET service where the password prompt only appears after a valid username is entered. This behavior can allow remote attackers to enumerate valid user accounts on the device.