GCVE - cpe:2.3:o:conceptronic:c54apm_firmware:1.26:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:conceptronic:c54apm_firmware:1.26:*:*:*:*:*:*:*

part: o version: 1.26 update: *

Vendor	Conceptronic (`a40eec8a-a5ba-53c2-a9b3-073a3cbb3e0f`)
Product	C54Apm Firmware (`53ef41da-3b5f-5aa2-9125-25f59076cb42`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1408`	vulnerable	2026-06-08 05:05:24.522042	Details available The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks. Published: 2014-01-10T16:00:00.000Z Updated: 2024-08-06T09:42:35.414Z Open on db.gcve.eu Reference links http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1407`	vulnerable	2026-06-08 05:05:24.521732	Details available Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup. Published: 2014-01-10T16:00:00.000Z Updated: 2024-08-06T09:42:35.379Z Open on db.gcve.eu Reference links http://osvdb.org/101919 http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf http://osvdb.org/101921	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1406`	vulnerable	2026-06-08 05:05:24.521391	Details available CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter in a Refresh action. Published: 2014-01-10T16:00:00.000Z Updated: 2024-08-06T09:42:35.313Z Open on db.gcve.eu Reference links http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1405`	vulnerable	2026-06-08 05:05:24.520465	Details available Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup. Published: 2014-01-10T16:00:00.000Z Updated: 2024-08-06T09:42:35.552Z Open on db.gcve.eu Reference links http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf http://osvdb.org/101916 http://osvdb.org/101917	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.