// For flags

CVE-2022-26073

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability.

Se presenta una vulnerabilidad de denegación de servicio en la funcionalidad libxm_av.so DemuxCmdInBuffer de Anker Eufy Homebase 2 versión 2.1.8.5h. Un conjunto de paquetes de red especialmente diseñado puede conllevar un reinicio del dispositivo. Un atacante puede enviar paquetes para desencadenar esta vulnerabilidad

*Credits: N/A
CVSS Scores
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Adjacent
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-03-03 CVE Reserved
  • 2022-05-05 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-16 First Exploit
  • 2025-01-18 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-190: Integer Overflow or Wraparound
CAPEC
References (1)
URL Tag Source
URL Date SRC
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1480 2024-09-16
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Anker
Search vendor "Anker"
 Eufy Homebase 2 Firmware
Search vendor "Anker" for product "Eufy Homebase 2 Firmware"
 2.1.8.5h
Search vendor "Anker" for product "Eufy Homebase 2 Firmware" and version "2.1.8.5h"
-
Affected
in Anker
Search vendor "Anker"
 Eufy Homebase 2
Search vendor "Anker" for product "Eufy Homebase 2"
--
Safe