high7.5
CVE-2023-31196
Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products.
Impact
Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affected products. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inaba | Ac-Pd-Wapu Firmware | through 1.05_b04 |
| Inaba | Ac-Pd-Wapum Firmware | through 1.05_b04 |
| Inaba | Ac-Pd-Wapu-P Firmware | through 1.05_b04p |
| Inaba | Ac-Pd-Wapum-P Firmware | through 1.05_b04p |
| Inaba | Ac-Wapu-300 Firmware | through 1.00_b07 |
| Inaba | Ac-Wapum-300 Firmware | through 1.00_b07 |
| Inaba | Ac-Wapum-300-P Firmware | through 1.00_b07 |
| Inaba | Ac-Wapu-300-P Firmware | through 1.00_b07 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN28412757/
- https://www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdf
- https://jvn.jp/en/jp/JVN28412757/
- https://www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdf