CVE-2025-25053 — Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac

Description (CNA)

OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product.

Affected (CNA)

Vendor / product	Versions
Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPS-11ac-P	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPSM-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-WPSM-11ac-P	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-PD-WPS-11ac	affected v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd. / AC-PD-WPS-11ac-P	affected v2.0.03P and earlier

CWE

CWE-78

References

https://www.inaba.co.jp/abaniact/news/security_20250404.pdf
https://jvn.jp/en/vu/JVNVU93925742/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.