CVE-2016-10115

NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware…

published January 4, 2017

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

🚨 The default password for NETGEAR Arlo devices is set to '12345678' — a classic choice, but absolutely devastating for security! 🔥 This situation is like leaving your front door wide open with a sign that says 'Welcome!' Anyone can just stroll in, especially after a factory reset—it's an invitation to trouble! An attacker could easily access your Arlo devices and view security footage, control settings, or even disable alarms — think of all the snooping they could do! With default security measures so weak, it’s a dream come true for anyone with bad intentions.

Put simply

This situation is like leaving your front door wide open with a sign that says 'Welcome!' Anyone can just stroll in, especially after a factory reset—it's an invitation to trouble! This vulnerability arises because NETGEAR Arlo devices ship with a known default password, making them susceptible to unauthorized access if not changed after setup or a factory reset.

What to do

An attacker could easily access your Arlo devices and view security footage, control settings, or even disable alarms — think of all the snooping they could do! With default security measures so weak, it’s a dream come true for anyone with bad intentions. Change your password immediately to something strong and unique. Also, ensure your firmware is updated to the latest version to bolster security. Don't forget to check back regularly for updates! You’ve got this! Take these steps to lock down your Arlo devices and protect your privacy! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05171 · 92.4th percentile
Published
2017-01-04T08:10Z
EPSS history
Timeline
  • 04 JAN 08:10Z
    NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware…
    cvelistv5