CVE-2019-3950

🗓️ 09 Jul 2019 17:18:56Reported by tenableType

Arlo Basestation firmware 1.12.0.1_27940 and prior has hardcoded credentials for root access via onboard serial interface

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2019-3950	9 Jul 201917:18	–	cvelist
EUVD	EUVD-2019-13557	7 Oct 202500:30	–	euvd
NVD	CVE-2019-3950	9 Jul 201918:15	–	nvd
Prion	Hardcoded credentials	9 Jul 201918:15	–	prion
RedhatCVE	CVE-2019-3950	22 May 202508:39	–	redhatcve
ThreatPost	Security Camera Firm Arlo Zaps High-Severity Bugs	2 Jul 201921:23	–	threatpost

NVD

Node

arlo vmb3010_firmwareRange<1.12.2.3_2762

AND

arlo vmb3010Match-

Node

arlo vmb4000_firmwareRange<1.12.2.3_2762

AND

arlo vmb4000Match-

Node

arlo vmb3500_firmwareRange<1.12.2.4_2773

AND

arlo vmb3500Match-

Node

arlo vmb4500_firmwareRange<1.12.2.4_2773

AND

arlo vmb4500Match-

Node

arlo vmb5000_firmwareRange<1.12.2.2_2824

AND

arlo vmb5000Match-

[
  {
    "product": "Basestation firmware",
    "vendor": "Arlo",
    "versions": [
      {
        "status": "affected",
        "version": "1.12.0.1_27940 and prior"
      }
    ]
  }
]

Source	Link
kb	www.kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms

21 Nov 2024 04:42Current

9.4High risk

Vulners AI Score9.4

CVSS 39.8

CVSS 210

EPSS0.0047

CWE-798