Unscored severity · published Dec 31, 2002
CVE-2002-2137
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP,…
–
CVSS
1.5%
EPSS
No
On KEV
Description
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DW
Dwl-900ap+ · D-link
b1_2.1; b1_2.2 · source: NVD
GL
Gl-2422ap-s · Alloy
All versions, or not specified · source: NVD
GA
Gl2422 AP · Eusso
All versions, or not specified · source: NVD
GL
Gl2422ap-0t · Wisecom
All versions, or not specified · source: NVD
WA
Wap11 · Linksys
2.2 · source: NVD