WatchGuard AP100, AP102 and AP200 Security Bypass Vulnerabilities

The WatchGuard AP100, AP102 and AP200 are all different series of indoor wireless access point devices from WatchGuard USA. A security vulnerability exists in the WatchGuard AP100, AP102, and AP200, AP300 that stems from the program failing to properly validate the 'old password' field in the...

CVE-2018-10577

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files...

CVE-2018-10577

WatchGuard AP100/AP102/AP200 devices running firmware before 1.2.9.15 and AP300 devices before 2.0.0.10 are affected by CVE-2018-10577. The issue allows any user authenticated on the web interface to upload files to the web root, where they can be executed with root privileges, enabling remote co...

CVE-2018-10578: Improper Input Validation

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field...

CVE-2018-10577: Unrestricted Upload of File with Dangerous Type

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files...

PT-2018-1576

Name of the Vulnerable Software and Affected Versions WatchGuard AP100 versions prior to 1.2.9.15 WatchGuard AP102 versions prior to 1.2.9.15 WatchGuard AP200 versions prior to 1.2.9.15 WatchGuard AP300 versions prior to 2.0.0.10 Description The issue is related to insufficient restriction on fil...