Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2021-11634 CVE-2021-31505 · GHSA-49rv-vwhv-6vcw

Hard-coded credentials in Arlo Q Plus

Priority LOW 31

This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3_278.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00551 Published 2021-06-29 No fix listed CWE-798
Priority MEDIUM 46

Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0179 Published 2019-07-09 No fix listed CWE-798