CVE-2025-29870

Summary

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information.

Affected Software

VendorProductVersion RangeStatus
Inaba Denki Sangyo Co., Ltd.AC-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPS-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-WPSM-11ac-Pv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11acv2.0.03P and earlieraffected
Inaba Denki Sangyo Co., Ltd.AC-PD-WPS-11ac-Pv2.0.03P and earlieraffected

Weaknesses

  • CWE-306: Missing authentication for critical function

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References