CVE-2014-1405

Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or 2 the wlan-url...

CVE-2014-1408

The CVE-2014-1408 entry concerns the Conceptronic C54APM access point running code 1.26 that uses a default admin password, enabling remote access via HTTP and enabling stored XSS attacks. The vulnerability is tied to an insecure default credential in the admin account, exposing administrative co...

CVE-2014-1407

CVE-2014-1407 affects the Conceptronic C54APM access point running code version 1.26. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formW...