CVE-2022-25989: Anker Eufy Homebase 2 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.

Affected products

• Anker Eufy Homebase 2 Firmware: version 2.1.8.5h only

Published 2022-05-05. Last modified 2026-06-17.