Aller au contenu
en Se connecter
7.7 Élevée

CVE-2021-21955 An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary…

Description

An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to password recovery. An attacker can sniff network traffic to trigger this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Anker Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Anker

Les 10 CVE de Anker →
CVE-2021-21953 An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy… 7.7 Élevée CVE-2021-21954 A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of… 9.9 Critique CVE-2021-21950 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security… 10.0 Critique CVE-2021-21951 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security… 10.0 Critique
Suivre cette CVE