CVE-2025-27934: high-severity vulnerability in Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A Wi-Fi access point (AC-WPS-11ac series) exposes authentication credentials to anyone on the network without requiring login. An attacker can remotely steal the device's security information, compromising access control.
CWE-497 vulnerability in AC-WPS-11ac Wi-Fi AP allows unauthenticated remote information disclosure of authentication credentials. Attack vector is network-based with no authentication requirement; successful exploitation grants attacker access to sensitive credential material, enabling unauthorized device control or network compromise.
In the same product, most dangerous first.