Skip to content
OpenAdvisories
High · 8.8 CVE-2025-25053 EUVD-2025-10420GHSA-m3h9-x8gr-vfvr

OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrar…

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by jpcert

Description

OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.

Affected products

VendorProductAffectedFixed
Inaba Denki Sangyo AC-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPS-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac-P v2.0.03P and earlier —

References