CVE-2002-0395
CVE-2002-0395 is a critical-severity vulnerability in Red-m 1050ap Lan Acess Point with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 2% (82nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Red-m 1050ap Lan Acess Point
- Published:
- Last modified:
Description
The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods.
Frequently asked questions
- What is CVE-2002-0395?
- The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods.
- How severe is CVE-2002-0395?
- CVE-2002-0395 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2002-0395 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2002-0395?
- CVE-2002-0395 affects Red-m 1050ap Lan Acess Point. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2002-0395?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2002-0395 published?
- CVE-2002-0395 was published on 2002-07-26 and last updated on 2026-06-16.
References
- http://www.atstake.com/research/advisories/2002/a060502-1.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9264
Affected products (1)
- cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*
More vulnerabilities in Red-m 1050ap Lan Acess Point
- CVE-2002-0398 — Critical (CVSS 10.0): Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute…
- CVE-2002-0393 — Critical (CVSS 10.0): Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a…
- CVE-2002-0394 — Critical (CVSS 10.0): Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a…
- CVE-2002-0396 — High (CVSS 7.5): The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to…
- CVE-2002-0397 — Medium (CVSS 5.0): Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a…