Skip to content
OpenAdvisories
High · 7.1 CVE-2022-25989 EUVD-2022-30558GHSA-3wpv-xcvc-6543

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-…

Published May 5, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: Anker Product: Eufy Homebase 2

Description

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Anker Eufy Homebase 2 2.1.8.5h —

References