CVE:CVE-2018-10576
CNNVD:CNNVD-201805-026
WatchGuard AP100、AP102和AP200都是美国WatchGuard公司的不同系列的室内无线接入点设备。
使用1.2.9.15之前版本固件的WatchGuard AP100、AP102和AP200中存在安全漏洞，该漏洞源于本地Access Point Web UI没有正确的处理身份验证。攻击者可借助本地系统账户利用该漏洞获取AP设备的访问权限。
solution:Upgrade watchguard ap200_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15); Upgrade watchguard ap102_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15); Upgrade watchguard ap100_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15)