Sophos AP6 Series Wireless Access Points Authentication Bypass Vulnerability Granting Administrative Privileges

An authentication bypass vulnerability has been identified in Sophos AP6 Series Wireless Access Points running firmware prior to version 1.7.2563 (MR7). This vulnerability allows remote attackers to gain administrative privileges on the access points by exploiting the management IP address.

Impact

Exploitation of this vulnerability allows remote attackers to bypass authentication and gain administrative privileges on the affected access points.

Remediation

Users of Sophos AP6 Series Wireless Access Points should upgrade to version 1.7.2563 (MR7) or later. Customers using the default updating policy will receive this update automatically. Those who have opted out of automatic updates must manually upgrade to the latest version.