CVE-2016-10116

High

Published: 04/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

NETGEAR Arlo base stations and Arlo Q and Arlo Q Plus devices with specific firmware versions use an easily predictable pattern for password generation, making them vulnerable to dictionary attacks.

Risk Assessment

Remote attackers can gain access to the devices, potentially leading to user privacy breaches and system control takeover.

Recommendation

It is recommended to update the firmware to the latest version and implement stronger password generation methods to minimize attack risks.

Other vulnerabilities in NETGEAR Arlo base stations, Arlo Q devices, Arlo Q Plus devices

CVE-2016-10115Critical
NETGEAR Arlo base stations and Arlo Q and Arlo Q Plus devices with specified firmware versions have a default password of 12345678. This makes it easier for remote attackers to gain access after a factory reset or in a factory configuration.

Original NVD description (English source)

NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote attackers to obtain access via a dictionary attack.