Vulnerabilities > CVE-2004-2079 - Remote vulnerability in Red-M Red-Alert 2.7.5V3.1Build24

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
red-m
NVD
Published: 2004-02-09
Updated: 2017-07-11

Summary

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.

Vulnerable Configurations

Part Description Count
Hardware
Red-M
1

References