High severity · published Apr 30, 2018
CVE-2018-10576
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15
7.8
CVSS
1.5%
EPSS
No
On KEV
Description
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account (instead of the dedicated web-only user).
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ap100 Firmware · Watchguard
before 1.2.9.15 · source: NVD
AF
Ap102 Firmware · Watchguard
before 1.2.9.15 · source: NVD
AF
Ap200 Firmware · Watchguard
before 1.2.9.15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-10576
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-10576
Mailing List
http://seclists.org/fulldisclosure/2018/May/12
Vendor Advisory
https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy
www.exploit-db.com
https://www.exploit-db.com/exploits/45409/
Vendor Advisory
https://www.watchguard.com/wgrd-blog/new-firmware-available-ap100ap102ap200ap300-security-vulnerability-fixes
More from Ap100 Firmware
9.8
CVE-2018-10578
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10
9.8
CVE-2018-10575
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15
8.8
CVE-2018-10577
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10