PT-2025-29695 · Unknown · Access Point

Japz Divino + 2 · Published 2025-07-16 · Updated 2025-07-16 · CVE-2025-52687

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description Successful exploitation of the issue could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffic, potentially leading to session hijacking and denial-of-service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-52687

Affected Products

Access Point

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-52687 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2025-072 · Note
• https://twitter.com/CVEnew/status/1945389109775868072 · Twitter Post
• https://al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf · Note
• https://t.me/cvetracker/27926 · Telegram Post
• https://t.me/cvenotify/129114 · Telegram Post