CVE-2021-21941: Use After Free
Published Oct 12, 2021
·Updated
A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to remote code execution.
Affected Software
2 affected components
Anker Eufy Homebase 2 Firmware=2.1.6.9h
Anker Eufy Homebase 2
Event History
Oct 12, 2021
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-21941?
CVE-2021-21941 is a use-after-free vulnerability in Anker Eufy Homebase 2 firmware version 2.1.6.9h.
2
What is the severity of CVE-2021-21941?
CVE-2021-21941 has a severity rating of 9 (critical).
3
How does CVE-2021-21941 affect Anker Eufy Homebase 2?
CVE-2021-21941 allows for remote code execution on Anker Eufy Homebase 2 devices.
4
How can I fix CVE-2021-21941?
To fix CVE-2021-21941, update Anker Eufy Homebase 2 firmware to version 2.1.6.9h or later.
5
Where can I find more information about CVE-2021-21941?
You can find more information about CVE-2021-21941 at the following link: [https://talosintelligence.com/vulnerability_reports/TALOS-2021-1370]