CVE-2014-1408

The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-01-10

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• C54apm (Conceptronic)
• C54apm Firmware (Conceptronic)

References

• http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
• http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf