What is CVE-2014-1405?

CVE-2014-1405 is a vulnerability in Conceptronic C54apm, classified under Improper Input Validation. Published 2014-01-10.

Is CVE-2014-1405 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Conceptronic C54apm

CVE-2014-1405

Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.

Affected products

Conceptronic C54apm — versions v2
Conceptronic C54apm_firmware — versions 1.26
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

antoniovazquezblanco/advisories

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)

Frequently asked questions

What is CVE-2014-1405?: CVE-2014-1405 is a vulnerability in Conceptronic C54apm, classified under Improper Input Validation. Published 2014-01-10.
Is CVE-2014-1405 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.