Design/Logic Flaw

2022-06-1718:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network.

CPENameOperatorVersion
eufy_homebase_2_firmwareeq2.1.85104

CPE	Name	Operator	Version
	eufy_homebase_2_firmware	eq	2.1.85104

References

talosintelligence.com/vulnerability_reports/TALOS-2022-1440