Eufy Anker Eufy Homebase 2 Access Control Error Vulnerability

Anker Eufy Homebase is a wireless home security camera system from Eufy U.S.A. An access control error vulnerability exists in Anker Eufy Homebase 2, which stems from the failure of the CMD_DEVICE_GET_RSA_KEY_REQUEST function in the product’s home_security file to correctly handle specially crafted packets, which can be exploited by an attacker to cause an authentication bypass.