CVE-2025-27722

Summary

Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information.

Affected Software

VendorProductVersion RangeStatus
Inaba Denki Sangyo Co., Ltd.AC-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPS-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11ac-Pv2.0.03P and earlieraffected

Weaknesses

  • CWE-319: Cleartext transmission of sensitive information

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References