Vulnerability Details CVE-2014-1406
CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter in a Refresh action.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.5%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2014-1406
-
cpe:2.3:h:conceptronic:c54apm:v2
-
cpe:2.3:o:conceptronic:c54apm_firmware:1.26