Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-0396
red-m 1050
bluetooth access point
cve-2002-0396
session authentication
web server security
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.9%
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
Affected configurations
Node
red-m1050ap_lan_acess_point
| CPE | Name | Operator | Version |
|---|---|---|---|
| red-m:1050ap_lan_acess_point | red-m 1050ap lan acess point | eq | * |
Related
cvelist
cvelist
CVE-2002-0396
2004-09-01 04:00:00
nvd
nvd
CVE-2002-0396
2002-07-26 04:00:00
securityvulns
securityvulns
@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities
2002-06-12 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.9%
Related for CVE-2002-0396