Security Camera Firm Arlo Zaps High-Severity Bugs

guest · Jul 2, 2019

Security Camera Firm Arlo Zaps High-Severity Bugs
Bugs in Arlo Technologies’ equipment allow a local attacker to take control of Alro wireless home video security cameras
July 2, 2019
https://threatpost.com/arlo-zaps-high-severity-bugs/146216/

Two high-severity vulnerabilities in Arlo Technologies’ wireless home security camera gear have been patched. The flaws, which indirectly impact Arlo’s popular fleet of wireless home security cameras, are limited to adversaries with local network and physical access to Arlo Base Stations.
Both vulnerabilities were publicly disclosed Monday by Arlo Technologies and Tenable, the security firm that found the bugs.

The bugs could ultimately lead to an adversary taking complete control of affected base station models and eventually any connected cameras. Arlo Technologies is a spin off from networking firm Netgear, as of January 2019.

One of the vulnerabilities (CVE-2019-3949) is described as an insufficient universal asynchronous receiver-transmitter (UART) protection mechanisms bug. Simply put, UART is a type of digital communications between two devices found on integrated circuits or a component.
The second flaw (CVE-2019-3950) is a networking misconfiguration bug in the Arlo Base Station that allows an attacker to control a user’s Arlo camera. The prerequisite for the attack is being connected to the same network as the base station.
Click to expand...

Log in or Sign up

Security Camera Firm Arlo Zaps High-Severity Bugs

guest Guest

Log in or Sign up

Security Camera Firm Arlo Zaps High-Severity Bugs

guest Guest

Useful Searches