CVE-2025-25213: medium-severity vulnerability in Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A Wi-Fi access point (AC-WPS-11ac series) doesn't properly protect its admin interface from being tricked by malicious websites. If you're logged in and visit a bad website, it can secretly perform unwanted actions on your device without your knowledge.
Improper UI layer restriction (clickjacking/frame confusion) in AC-WPS-11ac Wi-Fi AP admin interface allows an attacker to craft a malicious webpage that, when visited by an authenticated user, can trigger unintended administrative operations through hidden or overlaid UI elements. Attack requires user interaction while authenticated to the device.
In the same product, most dangerous first.