OS Command Injection Vulnerability in Wi-Fi AP UNIT AC-WPS-11ac Series by Inaba
CVE-2025-25053

8.8HIGH

Key Information:

Vendor

Inaba Denki Sangyo Co., Ltd.

Status
Ac-WPs-11ac
Ac-WPs-11ac-p
Ac-WPsm-11ac
Ac-WPsm-11ac-p
Vendor
CVE Published:
9 April 2025

What is CVE-2025-25053?

An OS command injection vulnerability has been identified in the WEB UI settings page of the Wi-Fi AP UNIT AC-WPS-11ac series by Inaba. This flaw allows an authenticated remote attacker to execute arbitrary OS commands, potentially compromising the device's integrity and security. Exploitation requires access to the management interface, raising concerns about unauthorized access and control methods. Organizations utilizing this product should implement immediate precautionary measures to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AC-PD-WPS-11ac v2.0.03P and earlier

AC-PD-WPS-11ac-P v2.0.03P and earlier

AC-WPS-11ac v2.0.03P and earlier

References

https://www.inaba.co.jp/abaniact/news/security_20250404.pdf
https://jvn.jp/en/vu/JVNVU93925742/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.