CVE-2022-25989 — Anker / Eufy Homebase 2

CVE-2022-25989

Anker / Eufy Homebase 2 PUBLISHED

Description (CNA)

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

Affected (CNA)

Vendor / product	Versions
Anker / Eufy Homebase 2	affected 2.1.8.5h

CWE

CWE-290

References

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479

ADP enrichment

CVE

No English description supplied.

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479

CISA-ADP

No English description supplied.

No references supplied.