Skip to content
fr Sign in
10.0 Critical

CVE-2021-21950 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security…

Description

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process. A specially-crafted network packet can lead to code execution.

Affected products and versions

Product Affected versions Fixed in
Anker Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Anker

The 10 CVEs of Anker →
CVE-2021-21953 An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy… 7.7 High CVE-2021-21955 An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary… 7.7 High CVE-2021-21954 A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of… 9.9 Critical CVE-2021-21951 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security… 10.0 Critical
Track this CVE