PT-2017-7742
CVE-2016-10116
·
Publicado
2017-01-04
·
Atualizado
2017-01-11
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
NETGEAR Arlo base stations versions 1.7.5 6178 and earlier
NETGEAR Arlo Q devices versions 1.8.0 5551 and earlier
NETGEAR Arlo Q Plus devices versions 1.8.1 6094 and earlier
Description
The issue allows remote attackers to obtain access via a dictionary attack because the customized password uses a predictable pattern of adjective, noun, and three-digit number.
Recommendations
For NETGEAR Arlo base stations versions 1.7.5 6178 and earlier, update the firmware to a version later than 1.7.5 6178.
For NETGEAR Arlo Q devices versions 1.8.0 5551 and earlier, update the firmware to a version later than 1.8.0 5551.
For NETGEAR Arlo Q Plus devices versions 1.8.1 6094 and earlier, update the firmware to a version later than 1.8.1 6094.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾