CVE-2022-25989

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2022-05-05

Last modified

2025-04-15

Weaknesses

CWE-290

Affected products

• Eufy Homebase 2 (Anker)
• Eufy Homebase 2 Firmware (Anker)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479