Conceptronic C54APM 2.0 'submit-url' Parameter HTTP Response Splitting Vulnerability
BID:64785
Info
Conceptronic C54APM 2.0 'submit-url' Parameter HTTP Response Splitting Vulnerability
| Bugtraq ID: | 64785 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-1406 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2014 12:00AM |
| Updated: | Jan 09 2014 12:00AM |
| Credit: | Antonio Vázquez Blanco |
| Vulnerable: |
Conceptronic C54APM 2.0 Firmware 1.26 |
| Not Vulnerable: | |
Discussion
Conceptronic C54APM 2.0 'submit-url' Parameter HTTP Response Splitting Vulnerability
Conceptronic C54APM 2.0 is prone to an HTTP response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.
Conceptronic C54APM 2.0 running firmware 1.26 is vulnerable.
Conceptronic C54APM 2.0 is prone to an HTTP response-splitting vulnerability.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into having a false sense of trust.
Conceptronic C54APM 2.0 running firmware 1.26 is vulnerable.
Exploit / POC
Conceptronic C54APM 2.0 'submit-url' Parameter HTTP Response Splitting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.