CVE:CVE-2019-3949
CNNVD:CNNVD-201907-504
Arlo Technologies Base Station是美国Arlo Technologies公司的一款摄像头基站设备。该产品主要通过家用路由器将Arlo和Arlo Pro无线摄像机连接到互联网。
使用1.12.0.1_27940及之前版本固件的Arlo Technologies Base Station中存在配置错误漏洞。该漏洞源于网络系统或组件的使用过程中存在不合理的文件配置、参数配置等。
solution:Upgrade arlo vmb3010_firmware to a higher version than 1.12.2.3_2762,and avoid the version (,1.12.2.3_2762); Upgrade arlo vmb4000_firmware to a higher version than 1.12.2.3_2762,and avoid the version (,1.12.2.3_2762); Upgrade arlo vmb3500_firmware to a higher version than 1.12.2.4_2773,and avoid the version (,1.12.2.4_2773); Upgrade arlo vmb4500_firmware to a higher version than 1.12.2.4_2773,and avoid the version (,1.12.2.4_2773); Upgrade arlo vmb5000_firmware to a higher version than 1.12.2.2_2824,and avoid the version (,1.12.2.2_2824)