Arlo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Arlo records in CISA KEV

No Arlo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vmb3010 Firmware 2 records MEDIUM Vmb3500 Firmware 2 records MEDIUM Vmb4000 Firmware 2 records MEDIUM Vmb4500 Firmware 2 records MEDIUM Vmb5000 Firmware 2 records MEDIUM Q Plus Firmware 1 record LOW

Records

2 records in Vmb4000 Firmware · all components

TI-2019-02956 CVE-2019-3950 · GHSA-f4jg-785x-37x7

Hard-coded credentials in Arlo Basestation firmware

MEDIUM 46

Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0179 Published 2019-07-09 No fix listed CWE-798

TI-2019-02955 CVE-2019-3949 · GHSA-4w44-prwr-955f

Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking…

MEDIUM 44

Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01191 Published 2019-07-09 No fix listed CWE-16

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0