Vulnerabilities > CVE-2002-2137 - Information Disclosure vulnerability in GlobalSunTech Access Point

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
alloy
d-link
eusso
linksys
wisecom

Summary

GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.

Vulnerable Configurations

Part Description Count
Hardware
Alloy
1
Hardware
D-Link
2
Hardware
Eusso
1
Hardware
Linksys
1
Hardware
Wisecom
1