CVE-2023-31196highCWE-306

CVE-2023-31196: high-severity vulnerability in Inaba Denki Sangyo Co., Ltd. Wi-Fi AP UNIT

Published · Updated

Follow this CVE+ Monitor Wi-Fi AP UNIT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.8%
In short

These Wi-Fi access points are missing authentication checks on certain functions, allowing anyone on the network to access sensitive information without logging in. This is a serious problem because attackers can steal configuration data and other private details.

Technical detail

Missing authentication mechanism (CWE-306) in critical functions of affected Wi-Fi AP units enables unauthenticated remote attackers to retrieve sensitive information. The vulnerability requires network access to the device but no credentials, allowing disclosure of configuration and operational data. Impacts all listed AC-PD-WAPU, AC-PD-WAPUM, AC-WAPU-300, and AC-WAPUM-300 series up to specified firmware versions.

Summary generated and translated by AI from the official description.
Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Inaba Denki Sangyo Co., Ltd. · Wi-Fi AP UNIT
Related CVEs — Inaba Denki Sangyo Co., Ltd. Wi-Fi AP UNIT

In the same product, most dangerous first.

CVE-2023-31198HIGHCVE-2023-31198EPSS 1.5%CVE-2023-28392HIGHCVE-2023-28392EPSS 0.9%