Skip to content
Sign in
7.7 High

CVE-2021-21955 An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary…

Description

An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to password recovery. An attacker can sniff network traffic to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Anker Versions not published

Other CVEs of Anker

The 10 CVEs of Anker →
CVE-2021-21953 An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy… 7.7 High CVE-2021-21954 A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of… 9.9 Critical CVE-2021-21950 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security… 10.0 Critical CVE-2021-21951 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security… 10.0 Critical
Track this CVE