What is CVE-2014-1408?

CVE-2014-1408 is a vulnerability in Conceptronic C54apm, classified under CWE-255. Published 2014-01-10.

Is CVE-2014-1408 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Conceptronic C54apm

CVE-2014-1408

The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

Conceptronic C54apm — versions v2
Conceptronic C54apm_firmware — versions 1.26
N/a — versions n/a

Weakness classification (CWE)

CWE-255

Public proof-of-concept exploits

antoniovazquezblanco/advisories

References

cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2014-1408?: CVE-2014-1408 is a vulnerability in Conceptronic C54apm, classified under CWE-255. Published 2014-01-10.
Is CVE-2014-1408 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.