CVE-2002-1974: The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root

Unscored severity · published Dec 31, 2002

CVE-2002-1974

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root

–

CVSS

2.8%

EPSS

On KEV

Description

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.8% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

sl-5000d; sl-5500 · source: NVD

Affected product

Zaurus

Sharp

References