HIGH🇵🇱 Wersja polska

CVE-2018-4028

CVSS 7.5v3.1pub. 2019-05-13upd. 2024-11-21

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Anker In Roav Dashcam A1

    HW
    Anker-In
    all versions

  • Anker In Roav Dashcam A1 Firmware

    OS
    Anker-In
    1.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2018-4014CRITICAL9.8PL ✓same product

RCE przez stack-based buffer overflow w Roav Dashcam A1 (Wi-Fi Command 9999)

CVE-2018-4018CRITICAL9.8PL ✓same product

Anker Roav A1 Dashcam — nieautoryzowana aktualizacja firmware przez HTTP

CVE-2018-4023CRITICAL9.8PL ✓same product

RCE przez stack-based buffer overflow w Anker Roav A1 Dashcam

CVE-2018-4029CRITICAL9.8PL ✓same product

RCE w firmware NT9665X — Anker Roav A1 Dashcam (zapis poza granicami pamięci)

CVE-2018-4027HIGH7.5same product

An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chips...