Security Advisory

CVE-2022-25989

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-05 17:35:09
Last updated 2025-04-15 19:04:26
Assigner talos
State PUBLISHED

Description

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.