Default Password Vulnerability in NETGEAR Arlo Base Stations and Devices

CVE-2016-10115 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or in a factory configuration.

Learn more about our Web Application Penetration Testing UK.