CVE-2025-29870

State
Published
Severity
7.5 High
Published
Apr 9, 2025
Updated
Apr 10, 2025
Reserved
Mar 24, 2025

Read the record on cve.org

Description

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Njpcert

Weaknesses

  • CWE-306 Missing authentication for critical function

Affected Products

ProductVersions
AC-WPS-11acInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected
AC-WPS-11ac-PInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected
AC-WPSM-11acInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected
AC-WPSM-11ac-PInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected
AC-PD-WPS-11acInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected
AC-PD-WPS-11ac-PInaba Denki Sangyo Co., Ltd.
  • v2.0.03P and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.