CVE:CVE-2018-10577
CNNVD:CNNVD-201805-095
WatchGuard AP100等都是美国WatchGuard公司的不同系列的室内无线接入点设备。
多款WatchGuard产品中存在安全漏洞。攻击者可借助文件上传功能利用该漏洞向Web root目录上传带有代码的文件，并以root权限执行这些文件。以下产品和版本受到影响：使用1.2.9.15之前版本固件的WatchGuard AP100；使用1.2.9.15之前版本固件的WatchGuard AP102；使用1.2.9.15之前版本固件的WatchGuard AP200；使用2.0.0.10之前版本固件的WatchGuard AP300。
solution:Upgrade watchguard ap200_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15); Upgrade watchguard ap102_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15); Upgrade watchguard ap100_firmware to a higher version than 1.2.9.15,and avoid the version (,1.2.9.15); Upgrade watchguard ap300_firmware to a higher version than 2.0.0.10,and avoid the version (,2.0.0.10)