What’s Vulnerable › Vulnerabilities

CVE-2014-1408

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-01-10 · updated 2026-06-17
• Weakness: CWE-255

Description

The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.

Affected products

• Conceptronic C54Apm: v2
• Conceptronic C54Apm Firmware: 1.26

References

• http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
• http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf
• http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
• http://download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf

Get alerted when CVE-2014-1408 or the next vulnerability affects your stack