critical9.8
CVE-2019-3950
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard …
Impact
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arlo | Vmb3010 Firmware | before 1.12.2.3_2762 |
| Arlo | Vmb4000 Firmware | before 1.12.2.3_2762 |
| Arlo | Vmb3500 Firmware | before 1.12.2.4_2773 |
| Arlo | Vmb4500 Firmware | before 1.12.2.4_2773 |
| Arlo | Vmb5000 Firmware | before 1.12.2.2_2824 |