Anker vulnerabilities
We track 3 vulnerabilities in Anker products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2022.
Latest Anker vulnerabilities
- 9.8 Critical severity
Eufy Homebase 2: Allocation of Resources Without Limits or Throttling
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
- 9.8 Critical severity
Eufy Homebase 2: Use After Free
A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network.
- 8.8 High severity
Eufy Homebase 2: Authentication Bypass by Spoofing
An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.