Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution, buffer overflows

Summary: Cisco Talos discovered two vulnerabilities in the Anker Eufy Homebase 2, the cloud-connected video storage and networking gateway for the Eufy Smarthome ecosystem: TALOS-2021-1369 (CVE-2021-21940), a heap-based buffer overflow in the pushMuxer processRtspInfo functionality triggered by a malicious packet, and TALOS-2021-1370 (CVE-2021-21941), a use-after-free that could allow remote code execution via a series of malicious packets. Anker patched these plus five other vulnerabilities affecting the same version, including remote code execution flaws TALOS-2021-1378 (CVE-2021-21950 and CVE-2021-21951) and TALOS-2021-1381 (CVE-2021-21954), and privilege escalation flaws TALOS-2021-1379 (CVE-2021-21952), TALOS-2021-1380 (CVE-2021-21953) and TALOS-2021-1382 (CVE-2021-21955), with Talos confirming version 2.1.6.9h could be exploited.
What's compelling: Every Eufy device connects to this one gateway, so a single unpatched Homebase 2 at version 2.1.6.9h is the path to remote code execution and, through the password reset flaw, account takeover across a household's cameras and smart-home settings.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21940 CVE-2021-21941 CVE-2021-21950 CVE-2021-21951 CVE-2021-21952 CVE-2021-21953 CVE-2021-21954 CVE-2021-21955
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026