The vulnerability stems from a missing or improperly enforced authentication check in the WatchGuard AuthPoint Authentication Gateway’s LDAP synchronization component. Because of this flaw, a remote attacker can bypass the single‑factor password step when the gateway operates under non‑default settings, although additional authentication factors (such as MFA) still remain active. The impact is a reduction in the strength of the first‑factor controls, potentially allowing attackers to access the gateway or downstream systems with lower effort than required for full authentication.

WatchGuard AuthPoint Authentication Gateway is affected. The issue applies to all releases prior to version 7.5.1, which introduces the necessary authentication validation. Administrative users or automated processes that rely on LDAP sync for first‑factor verification are particularly at risk.

The CVSS score of 7.4 indicates high severity. The EPSS score is not available, so current exploitation probability is unknown, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is remote; an adversary can trigger the flaw by interacting with the gateway’s LDAP sync interface under non‑default operating conditions. Successful exploitation does not grant full access but significantly lowers the barrier for further authentication attempts, potentially leading to a broader compromise if subsequent factors are circumvented or compromised.