Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution

guest · Oct 12, 2021

Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution, buffer overflows
October 12, 2021
https://blog.talosintelligence.com/2021/10/vuln-spotlight-anker-.html

Cisco Talos recently discovered two vulnerabilities in the Anker Eufy Homebase.

The Eufy Homebase 2 is the video storage and networking gateway that works with Anker’s Eufy Smarthome ecosystem. All Eufy devices connect to this cloud-connected device and allow users to adjust the settings on other Eufy Smarthome devices.
Click to expand...

TALOS-2021-1369 (CVE-2021-21940) is a heap-based buffer overflow vulnerability in Homebase’s pushMuxer processRtspInfo functionality. An attacker could send a malicious packet to trigger this vulnerability, causing a heap-based buffer overflow.

TALOS-2021-1370 (CVE-2021-21941) is a use-after-free vulnerability that could allow an attacker to execute remote code on the targeted device. Like the other vulnerability, an attacker needs to send a series of malicious packets to trigger this exploit.
Click to expand...

Users are encouraged to update these affected products as soon as possible: Anker Eufy Homebase 2, version 2.1.6.9h. Talos tested and confirmed these versions of Homebase could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution

guest Guest

Log in or Sign up

Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution

guest Guest

Useful Searches