PT-2017-7742

CVE-2016-10116

·

Publicado

2017-01-04

·

Atualizado

2017-01-11

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions NETGEAR Arlo base stations versions 1.7.5 6178 and earlier NETGEAR Arlo Q devices versions 1.8.0 5551 and earlier NETGEAR Arlo Q Plus devices versions 1.8.1 6094 and earlier
Description The issue allows remote attackers to obtain access via a dictionary attack because the customized password uses a predictable pattern of adjective, noun, and three-digit number.
Recommendations For NETGEAR Arlo base stations versions 1.7.5 6178 and earlier, update the firmware to a version later than 1.7.5 6178. For NETGEAR Arlo Q devices versions 1.8.0 5551 and earlier, update the firmware to a version later than 1.8.0 5551. For NETGEAR Arlo Q Plus devices versions 1.8.1 6094 and earlier, update the firmware to a version later than 1.8.1 6094.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾