The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 1050ap_lan_acess_point | Red-m | * | * |