PT-2025-29704 · Unknown · Access Point

Cao Yitian · Published 2025-07-16 · Updated 2025-07-21 · CVE-2025-52689

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Wireless Access Point (affected versions not specified)

Description Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2025-52689

Affected Products

Access Point

References · 11

• 🔥 https://github.com/UltimateHG/CVE-2025-52689-PoC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52689 · Security Note
• https://t.me/cvetracker/27928 · Telegram Post
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2025-072 · Note
• https://twitter.com/CCBalert/status/1945489156781613314 · Twitter Post
• https://blog.uhg.sg/article/24.html · Note
• https://t.me/cvenotify/129116 · Telegram Post
• https://al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf · Note
• https://twitter.com/ultimat3hg/status/1945780396672655500 · Twitter Post
• https://twitter.com/cracbot/status/1947250244431093802 · Twitter Post
• https://twitter.com/CVEnew/status/1945389107410297110 · Twitter Post