CVE-2014-1408
The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conceptronic:c54apm
- conceptronic:c54apm_firmware
References
- http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
- http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf
- http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
- http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf