CVE-2022-25989CWE-290

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h

High · published May 5, 2022

CVSS v3.0
7.1
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01004 · 62.6th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2022-05-05T17:35Z
EPSS history
Timeline
  • 05 MAY 17:35Z
    An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h
    cvelistv5