An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file. A specially-crafted network packet can lead to code execution.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
26 Jun 2023, 19:04
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1284 |
Information
Published : 2021-12-08 22:15
Updated : 2024-02-28 18:48
NVD link : CVE-2021-21951
Mitre link : CVE-2021-21951
CVE.ORG link : CVE-2021-21951
JSON object : View
Products Affected
anker
- eufy_homebase_2
- eufy_homebase_2_firmware