CVE-2025-23407: medium-severity vulnerability in Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in the settings page of Wi-Fi AP units allows logged-in users to change configurations they shouldn't have permission to modify. This could let someone with basic access alter important network settings.
CWE-266 privilege assignment flaw in the WEB UI settings page permits authenticated remote attackers to modify configuration parameters beyond their assigned privilege level. The vulnerability requires valid login credentials and affects AC-WPS-11ac series Wi-Fi AP units, potentially enabling unauthorized alteration of critical network settings.
In the same product, most dangerous first.