CVE-2019-3950
CVE-2019-3950
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Jul 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.
Affected products
Arlo · Basestation firmwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →