CVE-2025-29870

The Wi-Fi AC-WPS-11ac series access point allows anyone on the network to view sensitive configuration details, including login credentials, without needing to authenticate first. This is dangerous because attackers can use this information to take control of the device or access other systems.

A missing authentication control on a critical administrative function in the AC-WPS-11ac Wi-Fi AP enables unauthenticated remote attackers to retrieve configuration data via network access. The vulnerability exposes sensitive information including stored authentication credentials, requiring only network connectivity without prior authorization; impact includes unauthorized device takeover and lateral movement.