Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-23407 EUVD-2025-10426GHSA-xfj2-q583-73rv

Incorrect privilege assignment vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a…

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by jpcert

Vendor: Inaba Denki Sangyo Product: AC-PD-WPS-11ac Product: AC-PD-WPS-11ac-P Product: AC-WPS-11ac Product: AC-WPS-11ac-P Product: AC-WPSM-11ac Product: AC-WPSM-11ac-P

Description

Incorrect privilege assignment vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote attacker who can log in to the product may alter the settings without appropriate privileges.

Affected products

VendorProductAffectedFixed
Inaba Denki Sangyo AC-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPS-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac-P v2.0.03P and earlier —

References