PT-2025-15677 · Unknown · Ac-Wps-11Ac Series

Published 2025-04-09 · Updated 2025-04-09 · CVE-2025-23407

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: AC-WPS-11ac series (affected versions not specified)

Description: A remote attacker who can log in to the product may alter the settings without appropriate privileges due to an incorrect privilege assignment vulnerability in the WEB UI setting page.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-23407

Affected Products

Ac-Wps-11Ac Series

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-23407 · Security Note
• https://t.me/cvetracker/21203 · Telegram Post
• https://t.me/cvedetector/22550 · Telegram Post
• https://twitter.com/CVEnew/status/1909906892182135211 · Twitter Post
• https://t.me/cvenotify/118408 · Telegram Post
• https://jvn.jp/en/vu/JVNVU93925742 · Note
• https://inaba.co.jp/abaniact/news/security_20250404.pdf · Note