The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
References
| Link | Resource |
|---|---|
| http://www.atstake.com/research/advisories/2002/a060502-1.txt | Exploit Patch Vendor Advisory |
| http://www.securityfocus.com/bid/4940 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/9265 | |
| http://www.atstake.com/research/advisories/2002/a060502-1.txt | Exploit Patch Vendor Advisory |
| http://www.securityfocus.com/bid/4940 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/9265 |
Configurations
History
20 Nov 2024, 23:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.atstake.com/research/advisories/2002/a060502-1.txt - Exploit, Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/4940 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/9265 - |
Information
Published : 2002-07-26 04:00
Updated : 2024-11-20 23:38
NVD link : CVE-2002-0396
Mitre link : CVE-2002-0396
CVE.ORG link : CVE-2002-0396
JSON object : View
Products Affected
red-m
- 1050ap_lan_acess_point
CWE