Description
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
References
- A060502-1 vendor-advisory
- 4940 vdb-entry
- redm-1050ap-insecure-session(9265) vdb-entry