CVE-2025-25056

Summary

Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed.

Affected Software

VendorProductVersion RangeStatus
Inaba Denki Sangyo Co., Ltd.AC-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPS-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11ac-Pv2.0.03P and earlieraffected

Weaknesses

  • CWE-352: Cross-site request forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References