CVE-2025-29870: high-severity vulnerability in Inaba Denki Sangyo Co., Ltd. AC-WPS-11ac
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The Wi-Fi AC-WPS-11ac series access point allows anyone on the network to view sensitive configuration details, including login credentials, without needing to authenticate first. This is dangerous because attackers can use this information to take control of the device or access other systems.
A missing authentication control on a critical administrative function in the AC-WPS-11ac Wi-Fi AP enables unauthenticated remote attackers to retrieve configuration data via network access. The vulnerability exposes sensitive information including stored authentication credentials, requiring only network connectivity without prior authorization; impact includes unauthorized device takeover and lateral movement.
In the same product, most dangerous first.