PT-2014-4177 · Conceptronic · Conceptronic C54Apm

Published 2014-01-10 · Updated 2014-05-05 · CVE-2014-1408

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Conceptronic C54APM access point with runtime code 1.26

Description The issue allows remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks, due to a default password of admin for the admin account.

Recommendations For Conceptronic C54APM access point with runtime code 1.26, change the default password of the admin account to a strong and unique password to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-1408

Affected Products

Conceptronic C54Apm

References · 3

• 🔥 http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-1408 · Security Note
• http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf · Note