critical9.8
CVE-2019-3949
Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces.
Impact
Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arlo | Vmb3010 Firmware | before 1.12.2.3_2762 |
| Arlo | Vmb4000 Firmware | before 1.12.2.3_2762 |
| Arlo | Vmb3500 Firmware | before 1.12.2.4_2773 |
| Arlo | Vmb4500 Firmware | before 1.12.2.4_2773 |
| Arlo | Vmb5000 Firmware | before 1.12.2.2_2824 |