CVE-2004-2079: Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote...

Security readout for executives and security teams

Red-M Red-Alert 2.7.5 with software 3.1 build 24 trusted a user’s IP address as part of authentication. If another remote connection came from the same IP as someone already logged in, it could bypass authentication. Evidence is old and limited, but any exposed legacy deployment should be treated as risky. Likely limited to organizations still operating Red-M Red-Alert 2.7.5 software 3.1 build 24, especially if reachable by untrusted networks. Modern environments are unlikely affected unless this legacy appliance or software remains deployed. Prioritize discovery over emergency response unless the product is exposed or business-critical. If present, treat it as a legacy authentication weakness that may permit unauthorized access under shared-IP conditions. Unsupported or internet-accessible deployments should be isolated or retired promptly. Mitigation focus: Identify whether Red-M Red-Alert is deployed and confirm exact version/build.; Check vendor or archival guidance for patched versions or recommended remediation.; Restrict management access to trusted administrative networks only..

Prepared

Jun 29, 2026, 20:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.