CVE-2025-27722: Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may...
Description
Cleartext transmission of sensitive information issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a man-in-the-middle attack may allow a remote unauthenticated attacker to eavesdrop the communication and obtain the authentication information.
Classification
CVE ID: CVE-2025-27722
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.9
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem Types
Cleartext transmission of sensitive informationAffected Products
Vendor: Inaba Denki Sangyo Co., Ltd., Inaba Denki Sangyo Co., Ltd., Inaba Denki Sangyo Co., Ltd., Inaba Denki Sangyo Co., Ltd., Inaba Denki Sangyo Co., Ltd., Inaba Denki Sangyo Co., Ltd.
Product: AC-WPS-11ac, AC-WPS-11ac-P, AC-WPSM-11ac, AC-WPSM-11ac-P, AC-PD-WPS-11ac, AC-PD-WPS-11ac-P
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.02% (probability of being exploited)
EPSS Percentile: 2.61% (scored less or equal to compared to others)
EPSS Date: 2025-04-17 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-27722https://www.inaba.co.jp/abaniact/news/security_20250404.pdf
https://jvn.jp/en/vu/JVNVU93925742/