CVE-2018-10575
First published: Mon Apr 30 2018(Updated: )
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Watchguard Ap200 Firmware | <1.2.9.15 | |
| Watchguard Ap200 | ||
| Watchguard Ap102 Firmware | <1.2.9.15 | |
| Watchguard Ap102 | ||
| Watchguard Ap100 Firmware | <1.2.9.15 | |
| WatchGuard AP100 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-10575?
CVE-2018-10575 is a vulnerability that exists in WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, allowing for hardcoded credentials for an unprivileged SSH account.
What is the severity of CVE-2018-10575?
The severity of CVE-2018-10575 is rated as critical with a severity value of 9.8.
Which software versions of WatchGuard AP100, AP102, and AP200 devices are affected by CVE-2018-10575?
WatchGuard AP100, AP102, and AP200 devices with firmware versions before 1.2.9.15 are affected by CVE-2018-10575.
What is the impact of CVE-2018-10575?
CVE-2018-10575 allows an attacker to authenticate to an unprivileged SSH account with hardcoded credentials, providing unauthorized access to the device.
How to fix CVE-2018-10575?
To fix CVE-2018-10575, users should update the firmware of their WatchGuard AP100, AP102, and AP200 devices to version 1.2.9.15 or later.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/watchguard
- canonical/watchguard ap200 firmware
- canonical/watchguard ap200
- canonical/watchguard ap102 firmware
- canonical/watchguard ap102
- canonical/watchguard ap100 firmware
- canonical/watchguard ap100