high7.5
CVE-2002-0396
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to conne…
Impact
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Red-M | 1050ap Lan Acess Point | All versions |
References
- NVD record
- CVE.org record
- http://www.atstake.com/research/advisories/2002/a060502-1.txt
- http://www.securityfocus.com/bid/4940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9265
- http://www.atstake.com/research/advisories/2002/a060502-1.txt
- http://www.securityfocus.com/bid/4940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9265