CVE-2014-1405

Published: Jan 10, 2014Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple open redirect vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.

Affected (2)

Products: Conceptronic: C54apm Firmware, C54apm

2 products

C54apm Firmware

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Conceptronic C54apm Firmware	Version 1.26
Conceptronic C54apm	Version v2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf

Source: cve@mitre.org

Vendor Advisory

http://osvdb.org/101916

Source: cve@mitre.org

http://osvdb.org/101917

Source: cve@mitre.org

http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://osvdb.org/101916

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/101917

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.