Eufy HomeBase 2 model T8010X Vulnerable to WPA2-PSK Deprecation

CVE-2023-37822

What is CVE-2023-37822?

The Eufy Homebase 2 presents a significant vulnerability due to its implementation of a dedicated wireless network that functions as a proxy for the user's primary network. The mechanism used to generate the WPA2-PSK for this network relies solely on the product's serial number, leading to predictable keys. This flaw allows an attacker within the vicinity of the dedicated network to execute brute force attacks efficiently, potentially gaining access to the user's primary network without authorization. The implications of this vulnerability emphasize the need for enhanced security measures in device configurations, particularly for home automation systems.

References