CVE-2014-1405
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%
Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| conceptronic:c54apm_firmware | conceptronic c54apm firmware | eq | 1.26 |
| conceptronic:c54apm | conceptronic c54apm | eq | v2 |
Related
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.6%