CVE-2025-25056: medium-severity vulnerability in Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A security flaw in Wi-Fi AP UNIT 'AC-WPS-11ac series' allows attackers to trick logged-in users into performing unwanted actions on the device by viewing a malicious webpage. This could lead to unauthorized configuration changes or other harmful operations.
Cross-site request forgery (CSRF) vulnerability in AC-WPS-11ac series Wi-Fi access points exploits the lack of proper CSRF token validation. Attack vector requires a user authenticated to the device to visit an attacker-controlled page, enabling unauthorized state-changing operations such as configuration modifications without explicit user consent.
In the same product, most dangerous first.