Cross-Site Scripting Vulnerability in Access Point by Vendor
CVE-2025-52687
What is CVE-2025-52687?
This vulnerability allows an attacker with administrator credentials for the access point to execute malicious JavaScript within the context of the web traffic payload. This can lead to severe security implications, including session hijacking where attackers could impersonate legitimate users, and denial-of-service conditions affecting system availability. It is crucial for administrators to assess their security posture and apply necessary updates to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
OmniAccess Stellar AP1100 AWOS versions 5.0.2 GA and earlier
OmniAccess Stellar AP1200 AWOS versions 5.0.2 GA and earlier
OmniAccess Stellar AP1300 AWOS versions 5.0.2 GA and earlier
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
