← Database

CVE-2022-25989

HIGH CVSS: 8.8 Published: 2022-05-05 Modified: 2026-06-17

Description

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

Affected Platforms

Anker Eufy Homebase 2Anker Eufy Homebase 2 Firmware

Weakness Type

CWE-290, CWE-290

References