CVE-2025-28371 | EnGenius ENH500 AP 3.7.22 Password Change access control

A vulnerability, which was classified as problematic, was found in EnGenius ENH500 AP 3.7.22. Affected is an unknown function of the component Password Change Handler. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2025-28371. The attack needs to be approached within the local network. There is no exploit available.