eufy homebase 2 firmware vulnerabilities and fixes

Recent CVEs affecting eufy homebase 2 firmware, with upgrade or downgrade steps. 12 tracked.

Also searched as: eufyhomebase2firmware.

eufy homebase 2 firmware has 12 tracked vulnerabilities, 8 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-29. Highest priority: CVE-2022-29503 (score 67/100).

• CVE-2022-29503 CRITICAL 9.8 DOWNGRADE DOWNGRADE A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and u
• CVE-2022-26073 MEDIUM 6.5 MITIGATE A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homeb
• CVE-2022-25989 HIGH 8.8 MITIGATE An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Home
• CVE-2022-21806 CRITICAL 9.8 MITIGATE A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase
• CVE-2021-21955 HIGH 7.5 MITIGATE An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_secur
• CVE-2021-21954 CRITICAL 9.9 MITIGATE A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security bi
• CVE-2021-21953 HIGH 8.1 MITIGATE An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Ank
• CVE-2021-21952 CRITICAL 9.8 MITIGATE An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_
• CVE-2021-21951 CRITICAL 10.0 MITIGATE An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the hom
• CVE-2021-21950 CRITICAL 10.0 MITIGATE An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the hom
• CVE-2021-21941 CRITICAL 9.0 MITIGATE A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2
• CVE-2021-21940 CRITICAL 10.0 MITIGATE A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy

FAQ

How do I fix eufy homebase 2 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is eufy homebase 2 firmware being exploited right now?

None of the tracked eufy homebase 2 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which eufy homebase 2 firmware CVE should I patch first?

CVE-2022-29503 currently ranks highest (67/100): A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and u.

RSS feed for eufy homebase 2 firmware · ← Back to latest CVEs