CVE-2018-10576: High severity watchguard ap200 vulnerability
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account (instead of the dedicated web-only user).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10576?
CVE-2018-10576 is a vulnerability found in WatchGuard AP100, AP102, and AP200 devices with firmware versions before 1.2.9.15.
What is the severity of CVE-2018-10576?
The severity of CVE-2018-10576 is high, with a CVSS score of 7.8.
How does CVE-2018-10576 affect WatchGuard AP100, AP102, and AP200 devices?
CVE-2018-10576 allows improper authentication handling in the native Access Point web UI and enables authentication using a local system account instead of the dedicated web-only user.
Which versions of firmware are affected by CVE-2018-10576?
Versions of firmware before 1.2.9.15 are affected by CVE-2018-10576.
How can I fix CVE-2018-10576 on my WatchGuard AP100, AP102, or AP200 device?
To fix CVE-2018-10576, upgrade your firmware to version 1.2.9.15 or later.