VYPR

Basestation

by Arlo

CVEs (2)

  • CVE-2019-3950Jul 9, 2019
    risk 0.00cvss epss 0.00

    Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.

  • CVE-2019-3949Jul 9, 2019
    risk 0.00cvss epss 0.01

    Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.