CVE-2021-21953 | BDVDB-2026-166371 Detail
Anker
Description#
An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle attack can lead to increased privileges.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact low, availability impact high. Attack vector: network.
Weaknesses#
- CWE-300 Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.