Cross site scripting

2014-01-1016:47:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

JSON

The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.

CPENameOperatorVersion
c54apmeq2.0.118
c54apm_firmwareeq1.26

CPE	Name	Operator	Version
	c54apm	eq	2.0.118
	c54apm_firmware	eq	1.26

References

antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf

download.conceptronic.net/manuals/C04-058_C54APM_v2.0_Quick_Guide_ML.pdf