VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2014· Updated Jun 17, 2026

CVE-2014-1406

CVE-2014-1406

Description

CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter in a Refresh action.

Affected products

3
  • Conceptronic/C54apm2 versions
    cpe:2.3:h:conceptronic:c54apm:v2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:conceptronic:c54apm:v2:*:*:*:*:*:*:*
    • (no CPE)range: runtime code 1.26
  • Conceptronic/C54apm Firmware
    cpe:2.3:o:conceptronic:c54apm_firmware:1.26:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.