Improper UI Layer Restrictions in Wi-Fi AP UNIT 'AC-WPS-11ac series' by Inaba
CVE-2025-25213

6.5MEDIUM

Key Information:

Vendor

Inaba Denki Sangyo Co., Ltd.

Status
Ac-WPs-11ac
Ac-WPs-11ac-p
Ac-WPsm-11ac
Ac-WPsm-11ac-p
Vendor
CVE Published:
9 April 2025

What is CVE-2025-25213?

A vulnerability exists in the Wi-Fi AP UNIT 'AC-WPS-11ac series' due to improper restrictions of rendered user interface layers. This flaw can allow unauthorized actions to be executed when a logged-in user interacts with content on a malicious webpage. It highlights the risk associated with insufficient security controls in the handling of UI layers and frames, which may lead to unintended operations, compromising user data and device integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AC-PD-WPS-11ac v2.0.03P and earlier

AC-PD-WPS-11ac-P v2.0.03P and earlier

AC-WPS-11ac v2.0.03P and earlier

References

https://www.inaba.co.jp/abaniact/news/security_20250404.pdf
https://jvn.jp/en/vu/JVNVU93925742/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.