CVE-2002-2137: Alloy Gl-2422ap-S

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a "getsearch" request to UDP port 27155.

Affected products

• Alloy Gl-2422ap-S: any version
• D-Link Dwl-900ap+: version b1_2.1 only; version b1_2.2 only
• Eusso GL2422 Ap: any version
• Linksys WAP11: version 2.2 only
• Wisecom GL2422AP-0t: any version

Published 2002-12-31. Last modified 2026-06-16.