The vulnerability in Eufy Homebase 2 firmware 3.3.4.1h results from a flaw in the cryptographic key management that allows a local attacker to read sensitive information. By exploiting improper key handling, the attacker can access data that should remain confidential, such as credentials or configuration files.

The affected device is the Eufy Homebase 2, specifically firmware version 3.3.4.1h. No other product versions are listed in the advisory, so the impact is confined to this build.

The CVSS score of 7.7 categorizes the issue as high severity. EPSS data is not available and the vulnerability is not included in the CISA KEV catalog, indicating a lack of known public exploitation. The attack requires local access to the device, limiting the risk to environments where the hardware is reachable. An attacker could extract data without needing additional authentication.