CVE-2025-27934

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

Vendor	Product	Versions
Inaba Denki Sangyo Co., Ltd.	AC-WPS-11ac	v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd.	AC-WPS-11ac-P	v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd.	AC-WPSM-11ac	v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd.	AC-WPSM-11ac-P	v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd.	AC-PD-WPS-11ac	v2.0.03P and earlier
Inaba Denki Sangyo Co., Ltd.	AC-PD-WPS-11ac-P	v2.0.03P and earlier

References

Timeline

Published: Apr 9, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-279358.6The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the auth CVE-2025-279365.9Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform co CVE-2025-279377.1Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If e CVE-2025-279385.3Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").CVE-2025-279397.5An attacker can change registered email addresses of other users and take over arbitrary accounts.CVE-2025-27948.7An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-CVE-2025-279404.1Out-of-bounds read for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow an information disclosure. Software side ch CVE-2025-279536.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via CVE-2025-279546.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via CVE-2025-279556.5Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote att CVE-2025-279567.5Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via the id parameter.CVE-2025-27965.3On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhib