CVE-2018-10575

—

CVSS 3.0

9.8 critical

EPSS

9%p95

Published

Apr 30, 2018 (Apr 30, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.

Vendors: watchguard
Products: ap200 firmware, ap102 firmware, ap100 firmware
Weakness: CWE-798
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.5%)

In the news0 stories

No ingested article mentions this CVE yet.