CVE-2002-0396: The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to...

Security readout for executives and security teams

CVE-2002-0396 describes weak web management authentication on the Red-M 1050 Bluetooth Access Point. The device reportedly trusts the source IP of an already authenticated user instead of using proper per-session credentials, letting another connection from that same IP be treated as authenticated. Exposure is likely limited to environments still running Red-M 1050 Bluetooth Access Points with the web management server reachable by other users on shared networks, NAT paths, proxies, or adjacent administrative networks. Treat as a legacy exposure review rather than an emergency unless affected devices remain reachable. Prioritize discovery, management-plane isolation, and replacement planning because the source bundle gives no patch status or exploitation evidence. Mitigation focus: Check archived vendor or advisory guidance for any available firmware or configuration fix.; Restrict web management access to trusted administrative networks only.; Disable or isolate the management interface where operationally feasible..

Prepared

Jun 30, 2026, 04:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.