CVE-2019-3949 - CVE House
Back to Database
Status published Critical CVE-2019-3949

Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking...

Vulnerability Description

Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3949

Credits & Attribution

No credits recorded in the NVD database.

References

More from Arlo

View All →
CVE-2021-31505
This vulnerability allows attackers with physical access to escalate privileges...
Medium 6.8
CVE-2019-3950
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username...
Critical 9.8

Affected Vendor

Affected Software

Basestation firmware
Vulnerable Versions:
1.12.0.1_27940 and prior

Timeline

Official Publish: July 9th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.