CVE-2025-27722

Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information...

CVE-2025-29870

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

CVE-2025-29870

Affected product: Wi-Fi AP UNIT AC-WPS-11ac series from Inaba Denki Sangyo. CVE-2025-29870 describes a Missing authentication for critical function vulnerability that could allow a remote unauthenticated attacker to obtain the device configuration information, including authentication details. Th...

CVE-2025-27934

Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information...

CVE-2025-27797

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product...

CVE-2025-25213

Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...

CVE-2025-25056

Cross-site request forgery vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views a malicious page while logged in, unintended operations may be performed...

CVE-2025-25056

CVE-2025-25056 describes a Cross-site request forgery in Inaba Denki Sangyo Wi-Fi AP UNIT AC-WPS-11ac series. The vulnerability allows an authenticated user to perform unintended operations when visiting a malicious page while logged in. The JVN entry aggregates multiple CVEs for this product fam...

CVE-2025-23407

CVE-2025-23407 describes an incorrect privilege assignment in the WEB UI (settings page) affecting the Inaba Denki Sangyo Wi‑Fi AP UNIT AC‑WPS‑11ac series. A remote attacker who can log in to the product could alter settings without proper privileges. The CVE is rated CVSS v3.1 base score 4.3 (Me...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in the Inaba Denki Sangyo Wi-Fi AP UNIT that stems from a service-specific disclosure of authentication information, which could allow a remote attacker to obtain...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from an improperly assigned privilege that could lead to tampered settin...

Inaba Denki Sangyo Wi-Fi AP UNIT 跨站请求伪造漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A cross-site request forgery vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and earlier versions, which stems from a cross-site request forgery that could lead to a user...

The vulnerability of the SafeSetMacFilter function in the Tenda O4 V3.0 wireless Wi-Fi access point software allows a intruder to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SafeSetMacFilter function in the Tenda O4 V3.0 wireless Wi-Fi access point software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from improper restrictions in the UI layer or framework, and could lead to the user...

CVE-2025-27078

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...

CVE-2025-21429

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

CVE-2025-21430

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

CVE-2025-21429

CVE-2025-21429 is a memory corruption issue in Qualcomm WLAN components triggered when a STA connects to an AP and an ADD TS request is initiated. Affected component: Qualcomm WLAN. Impact: memory corruption with high availability impact per CVSS. Public details consistently describe the issue; n...

CVE-2025-21428 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session...

CVE-2025-20664

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...