CVE-2016-10115

Critical

Published: 04/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

NETGEAR Arlo base stations and Arlo Q and Arlo Q Plus devices with specified firmware versions have a default password of 12345678. This makes it easier for remote attackers to gain access after a factory reset or in a factory configuration.

Risk Assessment

The default password poses a serious security risk, allowing unauthorized users to access the devices, which may lead to privacy breaches and data security issues.

Recommendation

It is recommended to immediately change the default password to a strong and unique password and to regularly update the device firmware.

Original NVD description (English source)

NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or in a factory configuration.