CVE-2004-2078: Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (rebo...

Security readout for executives and security teams

CVE-2004-2078 affects Red-M Red-Alert 2.7.5 with software 3.1 build 24. A remote attacker could crash or reboot the device through TCP port 80, causing service disruption and loss of logged events. The bundle does not name a vendor patch. Exposure is most likely where legacy Red-M Red-Alert 2.7.5 software 3.1 build 24 remains deployed and TCP port 80 is reachable by untrusted networks. The bundle does not identify broader affected versions or CPEs. Prioritize if this device protects sensitive environments or is reachable from untrusted networks. The main business risk is loss of monitoring availability and event evidence, not confirmed data theft. Mitigation focus: Identify any Red-M Red-Alert deployments and confirm exact software build.; Restrict TCP port 80 access to trusted management networks only.; Check vendor or maintainer guidance for supported fixes or replacement paths..

Prepared

Jun 29, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.