CVE-2018-10577: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP...

Security readout for executives and security teams

Some WatchGuard wireless access points allowed any authenticated web-interface user to place executable code where the device would run it as root. A low-privileged or stolen web login could therefore become full device compromise. The provided sources do not show active exploitation. Exposure is likely limited to WatchGuard AP100, AP102, AP200, and AP300 devices running the vulnerable firmware ranges, especially where web management is reachable by broad internal users or exposed networks. Treat this as high priority if these legacy WatchGuard APs remain in service. Successful exploitation can give root control of network access infrastructure, but urgency depends on whether vulnerable devices and reachable web management interfaces still exist. Mitigation focus: Identify all WatchGuard AP100, AP102, AP200, and AP300 devices.; Check firmware versions against the vulnerable thresholds listed in the CVE.; Update AP100, AP102, and AP200 to 1.2.9.15 or later where vendor-supported..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.