WatchGuard Patches Critical Authentication Bypass and Command Injection Flaws in Access Points

Summary

WatchGuard patched three vulnerabilities in its Access Point firmware, including two critical flaws that can be exploited by attackers with network access to affected devices. The vulnerabilities can allow authentication bypass and arbitrary command execution.

Take Action:

Update affected WatchGuard Access Points to firmware version 3.4.8 or later. Until the update is applied, limit network access to affected access point services to trusted networks, as the two critical vulnerabilities can be exploited without authentication.

---

Read the full article on BeyondMachines

---

This article was originally published on BeyondMachines