CVE-2019-3950 — Arlo / Basestation firmware

CVE-2019-3950

Arlo / Basestation firmware PUBLISHED

Description (CNA)

Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.

Affected (CNA)

Vendor / product	Versions
Arlo / Basestation firmware	affected 1.12.0.1_27940 and prior

CWE

No CWE identifiers supplied.

References

https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms

ADP enrichment

CVE

No English description supplied.

https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms