Skip to main content

Eufy Homebase 2 Firmware CVE-2021-21954

CRITICAL
OS Command Injection (CWE-78)
2021-12-09 talos-cna@cisco.com
9.9
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.9 CRITICAL
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 09, 2021 - 16:15 nvd
CRITICAL 9.9

DescriptionNVD

A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to arbitrary command execution.

AnalysisAI

A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to arbitrary command execution. Affected products include: Anker Eufy Homebase 2 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.

CVE-2021-21951 CRITICAL POC
10.0 Dec 08

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security

CVE-2021-21950 CRITICAL POC
10.0 Dec 08

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security

CVE-2021-21940 CRITICAL POC
10.0 Oct 12

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase

CVE-2022-29503 CRITICAL POC
9.8 Sep 29

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1

CVE-2022-21806 CRITICAL POC
9.8 Jun 17

A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5

CVE-2021-21952 CRITICAL POC
9.8 Dec 22

An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security b

CVE-2021-21941 CRITICAL POC
9.0 Oct 12

A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h.

CVE-2022-25989 HIGH POC
8.8 May 05

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1

CVE-2021-21953 HIGH POC
8.1 Dec 22

An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Ho

CVE-2021-21955 HIGH POC
7.5 Dec 09

An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary

CVE-2022-26073 MEDIUM POC
6.5 May 05

A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.

Share

CVE-2021-21954 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy