CVE-2021-21954

CVE-2021-21954 affects Anker Eufy Homebase 2 (home_security binary) via wifi_country_code_update. The vulnerable code parses a JSON field country_code and injects it into the shell command (iwpriv ra0 set CountryCode=%s) without sanitization, leading to arbitrary command execution as root when th...