WatchGuard AP300 Firmware vulnerabilities

2 CVEs affecting WatchGuard AP300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10578, published 2018-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10577, published 2018-05-02. High severity, CVSS 8.8. EPSS: 6.4% chance of exploitation in the next 30 days. An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users…
CVE-2018-10578, published 2018-05-02. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field…