CVE-2018-10575: Critical severity watchguard ap200 vulnerability
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10575?
CVE-2018-10575 is a vulnerability that exists in WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, allowing for hardcoded credentials for an unprivileged SSH account.
What is the severity of CVE-2018-10575?
The severity of CVE-2018-10575 is rated as critical with a severity value of 9.8.
Which software versions of WatchGuard AP100, AP102, and AP200 devices are affected by CVE-2018-10575?
WatchGuard AP100, AP102, and AP200 devices with firmware versions before 1.2.9.15 are affected by CVE-2018-10575.
What is the impact of CVE-2018-10575?
CVE-2018-10575 allows an attacker to authenticate to an unprivileged SSH account with hardcoded credentials, providing unauthorized access to the device.
How to fix CVE-2018-10575?
To fix CVE-2018-10575, users should update the firmware of their WatchGuard AP100, AP102, and AP200 devices to version 1.2.9.15 or later.