Unscored CVE-2019-3950 EUVD-2019-13557GHSA-f4jg-785x-37x7

Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the dev…

Published Jul 9, 2019 · Updated Aug 4, 2024 · Assigned by tenable

Vendor: Arlo Product: Basestation firmware

Description

Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.

Affected products

Vendor	Product	Affected	Fixed
Arlo	Basestation firmware	1.12.0.1_27940 and prior	—

References

https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms