CVE-2002-2137 Information disclosure in n/a
Remote attackers can obtain sensitive WEP keys and admin passwords via a UDP request, compromising wireless network security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2137?
CVE-2002-2137 is a medium-severity vulnerability in n/a, published on 16 Nov 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.
Which versions are affected by CVE-2002-2137?
It affects 5 products.
Products include Alloy Gl-2422ap-S, D-Link Dwl-900ap\+, Eusso Gl2422 Ap, Linksys Wap11, Wisecom Gl2422ap-0t.
How do I fix CVE-2002-2137?
No fix has been published for CVE-2002-2137 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-2137 being exploited?
There is no known exploitation of CVE-2002-2137 in the wild and no public exploit code.
Sources
Also known as GHSA-xf2v-frx2-q782.