Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

TI-2022-11964 CVE-2022-29503 · GHSA-8544-pv22-r7m4

Memory corruption in Anker Eufy Homebase 2

Priority HIGH 76

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01314 Published 2022-09-29 No fix listed CWE-119
TI-2022-06178 CVE-2022-21806 · GHSA-3vc5-mpf6-vw2r

Use after free in Anker Eufy Homebase 2

Priority HIGH 82

A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2022-06-17 No fix listed CWE-368
TI-2022-09540 CVE-2022-26073 · GHSA-7j97-rqv4-wfhw

Integer overflow in Anker Eufy Homebase 2

Priority MEDIUM 62

A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00721 Published 2022-05-05 No fix listed CWE-190
Priority HIGH 71

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01004 Published 2022-05-05 No fix listed CWE-290
TI-2021-04997 CVE-2021-21952 · GHSA-jj7j-j99v-cgxw

Authentication bypass in Anker"

Priority MEDIUM 45

An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01313 Published 2021-12-22 No fix listed CWE-288
TI-2021-05000 CVE-2021-21955 · GHSA-f9ww-7rv4-vqfq

Improper authentication in Anker

Priority LOW 35

An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0101 Published 2021-12-09 No fix listed CWE-334
TI-2021-04999 CVE-2021-21954 · GHSA-853q-qp3f-8m3v

OS command injection in Anker

Priority MEDIUM 47

A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02514 Published 2021-12-09 No fix listed CWE-78
TI-2021-04995 CVE-2021-21950 · GHSA-mh9p-pq79-6q5x

Memory corruption in Anker

Priority MEDIUM 48

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02484 Published 2021-12-08 No fix listed CWE-119
TI-2021-04996 CVE-2021-21951 · GHSA-jhr5-5jh8-57wq

Memory corruption in Anker

Priority MEDIUM 48

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02484 Published 2021-12-08 No fix listed CWE-119
TI-2021-04986 CVE-2021-21941 · GHSA-8fwh-83cj-r97c

Use after free in Anker

Priority MEDIUM 42

A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01679 Published 2021-10-12 No fix listed CWE-368
TI-2021-04985 CVE-2021-21940 · GHSA-p9h3-248j-g7gh

Heap-based buffer overflow in Anker

Priority MEDIUM 46

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01335 Published 2021-10-12 No fix listed CWE-122