Skip to content
Noroxi

Anker records

13 published records for vendor anker.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2021-21950
    41Plan

    An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Euf

    CriticalCVSS 10.0No exploitEPSS 2%

    anker · eufy homebase 2 firmwareDec 8, 2021

  • CVE-2021-21951
    41Plan

    An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Euf

    CriticalCVSS 10.0No exploitEPSS 2%

    anker · eufy homebase 2 firmwareDec 8, 2021

  • CVE-2021-21954
    40Plan

    A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2

    CriticalCVSS 9.9No exploitEPSS 2%

    anker · eufy homebase 2 firmwareDec 9, 2021

  • CVE-2022-21806
    40Plan

    A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h.

    CriticalCVSS 9.8No exploitEPSS 2%

    anker · eufy homebase 2 firmwareJun 17, 2022

  • CVE-2021-21940
    40Plan

    A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h.

    CriticalCVSS 10.0No exploitEPSS 1%

    anker · eufy homebase 2 firmwareOct 12, 2021

  • CVE-2022-29503
    39Monitor

    A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40.

    CriticalCVSS 9.8No exploitEPSS 1%

    uclibc · uclibcSep 29, 2022

  • CVE-2021-21952
    39Monitor

    An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy

    CriticalCVSS 9.8No exploitEPSS 1%

    anker · eufy homebase 2 firmwareDec 22, 2021

  • CVE-2021-21941
    37Monitor

    A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h.

    CriticalCVSS 9.0No exploitEPSS 2%

    anker · eufy homebase 2 firmwareOct 12, 2021

  • CVE-2022-25989
    35Monitor

    An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h.

    HighCVSS 8.8No exploitEPSS 1%

    anker · eufy homebase 2 firmwareMay 5, 2022

  • CVE-2021-21953
    32Monitor

    An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.

    HighCVSS 8.1No exploitEPSS 1%

    anker · eufy homebase 2 firmwareDec 22, 2021

  • CVE-2018-19980
    30Monitor

    Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service (reboot of the underlying Android 7.1.2 operati

    HighCVSS 7.5No exploitEPSS 1%

    anker · nebula capsule projector firmwareDec 8, 2018

  • CVE-2021-21955
    30Monitor

    An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homeb

    HighCVSS 7.5No exploitEPSS 1%

    anker · eufy homebase 2 firmwareDec 9, 2021

  • CVE-2022-26073
    26Monitor

    A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h.

    MediumCVSS 6.5No exploitEPSS 1%

    anker · eufy homebase 2 firmwareMay 5, 2022