Arlo security breach (how to fix it)

The Arlo security breach is a problem that affects hundreds of devices.

Reported in 2019 by the company, the problem affects the following models:

AVD1001, FB1001, AAD1001, AC1001, VMC5040, VMB3000, VMB3500, VMB5000, VMC3030, VMC3040, VMC3040S, ABC1000, VMC4030, VML4030, VMC4030P, AL1101, ABB1000, and Arlo Smart

What is the Arlo security breach?

The Arlo security breach is a vulnerability that affects the wireless default password and allows a hacker to log in to the camera base station.

Here are the circumstances the vulnerability takes place:

When the Arlo base station, Arlo Q or Arlo Q Plus are connected to the for the very first time with the default password that is easy to identify.

After a default factory password reset which takes the base station back to the original configuration with the identifiable standard password.

If the base station is removed from the user account using the Arlo Interface. The system comes back to the easily identifiable default password.

Products that are Arlo security breach

Arlo base stations: 

VMS3xx0, VMK3xx0, and VMB30x0) with firmware version 1.7.5_ 6178 or older

Arlo Q cameras

VMC3040 running firmware version 1.8.0_5551 or older

Arlo Q Plus cameras

VMC3040s running firmware version 1.8.1_6094 or older

See the procedure to fix the Arlo security vulnerability

There's firmware released by Arlo that fixes the default password vulnerability.

Automatic firmware update

If you have an Arlo base station that was connected to the Internet after October 10, 2016, it probably was automatically updated. (just check to make sure). 

This firmware update protected your Arlo system from the password vulnerability.

Firmware update verification

You can check if your Arlo base stations and Arlo cameras have the latest firmware that protected from the  WiFi default password vulnerability:

Here are the steps to verify the Arlo password vulnerability firmware update:

Arlo Base Station

• Log in to the Arlo portal using your account or use the Arlo app
• Click on Settings > My Devices and select the base station
• Click on Device Info and check if the firmware is 1.8.1_9169 or greater

If the firmware version is new your Arlo Base station is protected.

Arlo Q or Arlo Q Plus camera

• Log in to the Arlo portal using your account or use the Arlo app
• Click on Settings > My Devices and select the camera you want to check
• Click on Device Info and check if the firmware is 1.8.3_9642 or greater

If the firmware version is new your Arlo Camera is protected.

Conclusion

The Arlo security breach is a big problem you need to take care of.

If you need more information, visit the Arlo Website.

Please share this article with your friends.