← Vulnerability feed

Vulnerability record · CVE-2002-2137 · published 31 December 2002

CVE-2002-2137: Alloy gl-2422ap-s vulnerability

Alloy · Gl 2422ap S

GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.

5.0 CVSS 2.0 Medium EPSS 1.5% · top 26.6%
5.0CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
6References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://online.securityfocus.com/archive/1/298432 ExploitVendor Advisory
http://www.iss.net/security_center/static/10536.php
http://www.securityfocus.com/bid/6100 Exploit
http://online.securityfocus.com/archive/1/298432 ExploitVendor Advisory
http://www.iss.net/security_center/static/10536.php
http://www.securityfocus.com/bid/6100 Exploit

Track CVE-2002-2137 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2003-1346D-link dwl-900ap\+ permissions and access controls vulnerabilityD-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware u…EPSS 2.0%7.5CVE-2001-0514Atmel 802.11b vnet-b access point vulnerabilitySNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings wi…EPSS 1.6%5.0CVE-2002-1865D-link di-804 vulnerabilityBuffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4…EPSS 2.9%5.0CVE-2001-0888Atmel firmware vulnerabilityAtmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string ot…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2002-2137), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.