CVE-2021-21953
7.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H
Summary
An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle attack can lead to increased privileges.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Anker | Anker Eufy Homebase 2 2.1.6.9h | affected |
Weaknesses
- CWE-300: CWE-300: Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.