JVNDB-2025-002990

Vulnerability from jvndb - Published: 2025-04-07 08:44 - Updated:2025-04-07 08:44
Severity
9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series'
Details
Wi-Fi AP UNIT 'AC-WPS-11ac series' provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below.
  • Incorrect privilege assignment in the WEB UI (the setting page) (CWE-266) - CVE-2025-23407
  • OS command injection in the WEB UI (the setting page) (CWE-78) - CVE-2025-25053
  • Cross-site request forgery (CWE-352) - CVE-2025-25056
  • Improper restriction of rendered UI layers or frames (CWE-1021) - CVE-2025-25213
  • Cleartext transmission of sensitive information (CWE-319) - CVE-2025-27722
  • OS command injection in the specific service (CWE-78) - CVE-2025-27797
  • Information disclosure of authentication information in the specific service (CWE-497) - CVE-2025-27934
  • Missing authentication for critical function (CWE-306) - CVE-2025-29870
Inaba Denki Sangyo Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-002990.html",
  "dc:date": "2025-04-07T17:44+09:00",
  "dcterms:issued": "2025-04-07T17:44+09:00",
  "dcterms:modified": "2025-04-07T17:44+09:00",
  "description": "Wi-Fi AP UNIT \u0027AC-WPS-11ac series\u0027 provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\u003cli\u003e\u003cb\u003eIncorrect privilege assignment in the WEB UI (the setting page) (CWE-266)\u003c/b\u003e - CVE-2025-23407\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eOS command injection in the WEB UI (the setting page) (CWE-78)\u003c/b\u003e - CVE-2025-25053\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eCross-site request forgery (CWE-352)\u003c/b\u003e - CVE-2025-25056\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eImproper restriction of rendered UI layers or frames (CWE-1021)\u003c/b\u003e - CVE-2025-25213\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eCleartext transmission of sensitive information (CWE-319)\u003c/b\u003e - CVE-2025-27722\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eOS command injection in the specific service (CWE-78)\u003c/b\u003e - CVE-2025-27797\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eInformation disclosure of authentication information in the specific service (CWE-497)\u003c/b\u003e - CVE-2025-27934\u003c/li\u003e\r\n\u003cli\u003e\u003cb\u003eMissing authentication for critical function (CWE-306)\u003c/b\u003e - CVE-2025-29870\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nInaba Denki Sangyo Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-002990.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:inaba:ac-pd-wps-11ac-p_firmware",
      "@product": "AC-PD-WPS-11ac-P",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:inaba:ac-pd-wps-11ac_firmware",
      "@product": "AC-PD-WPS-11ac",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:inaba:ac-wps-11ac-p_firmware",
      "@product": "AC-WPS-11ac-P",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:inaba:ac-wps-11ac_firmware",
      "@product": "AC-WPS-11ac",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:inaba:ac-wpsm-11ac-p_firmware",
      "@product": "AC-WPSM-11ac-P",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:inaba:ac-wpsm-11ac_firmware",
      "@product": "AC-WPSM-11ac",
      "@vendor": "INABA DENKI SANGYO CO., LTD.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-002990",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU93925742/index.html",
      "@id": "JVNVU#93925742",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-23407",
      "@id": "CVE-2025-23407",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-25053",
      "@id": "CVE-2025-25053",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-25056",
      "@id": "CVE-2025-25056",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-25213",
      "@id": "CVE-2025-25213",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-27722",
      "@id": "CVE-2025-27722",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-27797",
      "@id": "CVE-2025-27797",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-27934",
      "@id": "CVE-2025-27934",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-29870",
      "@id": "CVE-2025-29870",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/1021.html",
      "@id": "CWE-1021",
      "@title": "Improper Restriction of Rendered UI Layers or Frames(CWE-1021)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/266.html",
      "@id": "CWE-266",
      "@title": "Incorrect Privilege Assignment(CWE-266)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/306.html",
      "@id": "CWE-306",
      "@title": "Missing Authentication for Critical Function(CWE-306)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/319.html",
      "@id": "CWE-319",
      "@title": "Cleartext Transmission of Sensitive Information(CWE-319)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/497.html",
      "@id": "CWE-497",
      "@title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere(CWE-497)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    }
  ],
  "title": "Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT \u0027AC-WPS-11ac series\u0027"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.