TI-2022-06178 CVE-2022-21806 · GHSA-3vc5-mpf6-vw2r
Use after free in Anker Eufy Homebase 2
Priority HIGH 82
A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h.
Anker
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Anker records in CISA KEVNo Anker vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2022-11964 CVE-2022-29503 · GHSA-8544-pv22-r7m4
Memory corruption in Anker Eufy Homebase 2
Priority HIGH 76
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40.
TI-2022-09500 CVE-2022-25989 · GHSA-3wpv-xcvc-6543
Authentication bypass by spoofing in Anker Eufy Homebase 2
Priority HIGH 71
An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h.
TI-2022-09540 CVE-2022-26073 · GHSA-7j97-rqv4-wfhw
Integer overflow in Anker Eufy Homebase 2
Priority MEDIUM 62
A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h.
TI-2021-04996 CVE-2021-21951 · GHSA-jhr5-5jh8-57wq
Memory corruption in Anker
Priority MEDIUM 48
An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file.
TI-2021-04995 CVE-2021-21950 · GHSA-mh9p-pq79-6q5x
Memory corruption in Anker
Priority MEDIUM 48
An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process.
TI-2021-04999 CVE-2021-21954 · GHSA-853q-qp3f-8m3v
OS command injection in Anker
Priority MEDIUM 47
A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.
TI-2021-04985 CVE-2021-21940 · GHSA-p9h3-248j-g7gh
Heap-based buffer overflow in Anker
Priority MEDIUM 46
A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h.
TI-2021-04997 CVE-2021-21952 · GHSA-jj7j-j99v-cgxw
Authentication bypass in Anker"
Priority MEDIUM 45
An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.
TI-2021-04986 CVE-2021-21941 · GHSA-8fwh-83cj-r97c
Use after free in Anker
Priority MEDIUM 42
A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h.
TI-2021-04998 CVE-2021-21953 · GHSA-32vw-8j97-rj69
An authentication bypass vulnerability exists in the process_msg() function of the…
Priority LOW 37
An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.
TI-2021-05000 CVE-2021-21955 · GHSA-f9ww-7rv4-vqfq
Improper authentication in Anker
Priority LOW 35
An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.
TI-2018-14163 CVE-2018-19980 · GHSA-fwjc-xwf7-mvwp
Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of…
Priority LOW 35
Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service (reboot of the underlying Android 7.1.2 operating system) via a crafted application that sends data to WifiService.