Lucene search
HistoryJan 10, 2014 - 4:47 p.m.
CVE-2014-1408
cve-2014-1408
conceptronic
c54apm
access point
default password
admin account
remote attackers
http request
stored xss
vulnerability
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.9%
The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.
Affected configurations
Node
conceptronicc54apm_firmwareMatch1.26
conceptronicc54apmMatchv2
| CPE | Name | Operator | Version |
|---|---|---|---|
| conceptronic:c54apm_firmware | conceptronic c54apm firmware | eq | 1.26 |
| conceptronic:c54apm | conceptronic c54apm | eq | v2 |
Related
prion
prion
Cross site scripting
2014-01-10 16:47:00
cvelist
cvelist
CVE-2014-1408
2014-01-10 16:00:00
nvd
nvd
CVE-2014-1408
2014-01-10 16:47:06
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.9%
Related for CVE-2014-1408