SpinetiX Fusion Digital Signage versions 3.4.8 and below suffer from a username enumeration vulnerability.