SB2022050606 - Multiple vulnerabilities in Eufy eufyCam 2

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Authentication Bypass by Spoofing (CVE-ID: CVE-2022-25989)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an authentication bypass in the libxm_av.so getpeermac() functionality. A remote attacker on the local network can send a specially crafted DHCP packet and bypass authentication process.

2) Integer overflow (CVE-ID: CVE-2022-26073)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow in the libxm_av.so DemuxCmdInBuffer functionality. A remote attacker on the local network can pass specially crafted data to the application, trigger integer overflow and cause a denial of service condition on the target system.

Remediation

Install update from vendor's website.

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1479
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1480