{"id":"CVE-2018-10577","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-10577","generatedAt":"2026-10-28T21:27:04.403Z","title":"File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files to be executed as root.","description":"An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files to be executed as root.","published":"2018-05-02T21:29:01.000Z","lastModified":"2026-06-17T01:34:12.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-434"],"affected":["watchguard/ap200 firmware","watchguard/ap102 firmware","watchguard/ap100 firmware","watchguard/ap300 firmware"],"epss":{"score":0.06372,"percentile":0.93621,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.05317,"percentile":0.92284},{"date":"2026-09-22","score":0.06493,"percentile":0.93452}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-09-14","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45409,"kind":"exploit","title":"Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/45409","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/45409.rb","file":"exploits/linux/webapps/45409.rb","published":"2018-09-14","added":"2018-09-14","updated":"2018-09-14","author":"Stephen Shkardoon","type":"webapps","platform":"linux","port":443,"verified":false,"codes":["CVE-2018-10575","CVE-2018-10576","CVE-2018-10577"],"tags":"Remote","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 6.4%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2018/May/12","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45409/","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2018/May/12","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45409/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-10577","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}