CVE-2002-1974: The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote at...

Security readout for executives and security teams

This is a legacy-device issue: affected Sharp Zaurus PDAs expose FTP without requiring a login, allowing remote access to the device file system as root. Business risk is mainly for organizations that still operate these devices or keep them connected in labs, facilities, or embedded workflows. Exposure is likely limited to legacy Sharp Zaurus SL-5000D or SL-5500 devices with FTP enabled and reachable on a network. Internet exposure would raise urgency, but the sources do not confirm current exposed populations. Prioritize quickly if these devices are still connected to production, facility, or internet-reachable networks. Otherwise, handle through legacy asset cleanup and network segmentation because the issue is old but the access impact is severe. Mitigation focus: Identify whether SL-5000D or SL-5500 devices remain in use.; Disable FTP on affected devices where operationally possible.; Restrict device access to trusted management networks only..

Prepared

Jun 29, 2026, 19:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.