Command injection

2021-12-0916:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to arbitrary command execution.

CPENameOperatorVersion
eufy_homebase_2_firmwareeq2.1.69104

CPE	Name	Operator	Version
	eufy_homebase_2_firmware	eq	2.1.69104

References

talosintelligence.com/vulnerability_reports/TALOS-2021-1381