CVE-2025-23407 — Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac

Description (CNA)

Incorrect privilege assignment vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote attacker who can log in to the product may alter the settings without appropriate privileges.

Affected (CNA)

Vendor / product	Versions
Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac-P	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPSM-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPSM-11ac-P	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-PD-WPS-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-PD-WPS-11ac-P	affected v2.0.03P and earlier

CWE

CWE-266

References

https://www.inaba.co.jp/abaniact/news/security_20250404.pdf
https://jvn.jp/en/vu/JVNVU93925742/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.