PatchTheCVEanker vulnerabilities
Recent CVEs affecting anker products. 12 tracked.
anker has 12 tracked vulnerabilities, 8 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-29. Highest priority: CVE-2022-29503 (score 67/100).
- CVE-2022-29503 CRITICAL 9.8 DOWNGRADE DOWNGRADE A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and u
- CVE-2022-26073 MEDIUM 6.5 MITIGATE A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homeb
- CVE-2022-25989 HIGH 8.8 MITIGATE An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Home
- CVE-2022-21806 CRITICAL 9.8 MITIGATE A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase
- CVE-2021-21955 HIGH 7.5 MITIGATE An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_secur
- CVE-2021-21954 CRITICAL 9.9 MITIGATE A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security bi
- CVE-2021-21953 HIGH 8.1 MITIGATE An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Ank
- CVE-2021-21952 CRITICAL 9.8 MITIGATE An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_
- CVE-2021-21951 CRITICAL 10.0 MITIGATE An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the hom
- CVE-2021-21950 CRITICAL 10.0 MITIGATE An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the hom
- CVE-2021-21941 CRITICAL 9.0 MITIGATE A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2
- CVE-2021-21940 CRITICAL 10.0 MITIGATE A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy
FAQ
How do I fix anker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is anker being exploited right now?
None of the tracked anker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which anker CVE should I patch first?
CVE-2022-29503 currently ranks highest (67/100): A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and u.