Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-27797 EUVD-2025-10419GHSA-vrc5-8xfg-g69r

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS comm…

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by jpcert

Description

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.

Affected products

VendorProductAffectedFixed
Inaba Denki Sangyo AC-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPS-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-WPSM-11ac-P v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac v2.0.03P and earlier —
Inaba Denki Sangyo AC-PD-WPS-11ac-P v2.0.03P and earlier —

References