CVE-2002-0396

CVE-2002-0396 describes a critical authentication bypass vulnerability in the Red-M 1050 Bluetooth Access Point's web management server. This flaw allows unauthorized attackers to gain access by connecting from the same IP address as an already authenticated user, as the server lacks proper session-based credential validation. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for network-based attacks with low complexity that can lead to partial compromise of confidentiality, integrity, and availability. The FAUCET Risk Score of 85/100 further emphasizes its significant risk. While there is no evidence of active exploitation, nor readily available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered notable community discussion with 10 mentions, indicating awareness and potential interest among researchers.