Inaba Denki Sangyo Wi-Fi AP Unit AC-WPS-11ac Series OS Command Injection Vulnerability
Vulnerability
A command injection vulnerability has been identified in the web user interface settings page of Inaba Denki Sangyo Wi-Fi AP Unit 'AC-WPS-11ac series'. This vulnerability allows a remote attacker with login access to execute arbitrary operating system commands on the device.
Impact
Exploitation of this vulnerability allows for arbitrary OS command execution by a remote attacker with login credentials for the device.
Remediation
Users are advised to update the device's firmware to the latest version, v2.0.06.13P. If the firmware update is not feasible, consider implementing recommended workarounds such as restricting web UI access to wired LAN connections only.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.