by Kastro
Paper/Archive/CVE-2025-10159

CVE-2025-10159

Sophos AP6 Series Wireless Access Points — An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Poi…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.9.599 × 2012.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points older than firmware version 1.7.2563 (MR7).

Affected

ProductAffectedFixed inSource
AP6 Series Wireless Access Points< 1.7.2563 (MR7)1.7.2563 (MR7)CNA

Scores by source

Sophos (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsophos.com/en-us/security-advisories/sophos-sa-20250909-ap6