CVE-2018-4027

The CVE-2018-4027 entry maps to a denial-of-service flaw in the Novatek NT9665X chipset firmware used by the Anker Roav A1 Dashcam. The XML_UploadFile Wi‑Fi command (RoavA1_SW_V1.9) can be triggered by a specially crafted packet to cause a semaphore deadlock, locking WIFICMD_SEM_ID and potentiall...

CVE-2018-4028

The CVE-2018-4028 issue affects the NT9665X chipset firmware in the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). A vulnerability in the HTTP server could allow an attacker to overwrite the root directory via an HTTP POST, causing a denial of service. Talos details describe a firmware-update vulnerabil...

CVE-2018-4028

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POS...

CVE-2018-4018

CVE-2018-4018 affects the NT9665X Chipset firmware used in the Anker Roav A1 Dashcam (version RoavA1_SW_V1.9). The vulnerability arises from the HTTP server that handles firmware updates, allowing an attacker to upload arbitrary firmware binaries via HTTP PUT or upgrade requests, which are flashe...

CVE-2018-4018

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server allows for arbitrary firmware binaries to be uploaded which will be flashed upon next reboot. An attacker can send an HTTP PUT request or...

CVE-2018-4025

An exploitable denial-of-service vulnerability exists in the XMLGetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot...

CVE-2018-4026

An exploitable denial-of-service vulnerability exists in the XMLGetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot...

CVE-2018-4023

The CVE-2018-4023 issue affects the NT9665X chipset firmware used in the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The vulnerability is in the XML_UploadFile Wi‑Fi command (command 5001) where the fixup_path routine copies user-supplied URL paths into a fixed-size stack buffer without bounds checki...

Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam

Lilith Wyatt of Cisco Talos discovered these vulnerabilities. Executive Summary Cisco Talos is disclosing multiple vulnerabilities in the Anker Roav A1 Dashcam and the Novatek NT9665X chipset. The Roav A1 Dashcam by Anker is a dashboard camera that allows users to connect using the Roav app for...

PT-2019-10758

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the XML GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware. It can be exploited by sending a specially crafted packet, which causes an invalid...

CVE-2018-4028: Incorrect Permission Assignment for Critical Resource

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POS...

PT-2019-10757

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the thumbnail display functionality of the NT9665X Chipset firmware. It can be exploited by a specially crafted packet, causing a null pointer dereferen...

PT-2019-10759

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the XML GetScreen Wi-Fi command of the NT9665X Chipset firmware. It can be exploited by sending a specially crafted set of packets, causing an invalid...

PT-2019-10761

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A firmware update issue exists in the NT9665X Chipset firmware. The HTTP server is vulnerable, allowing an attacker to overwrite the root directory of the server. This can result in a deni...

PT-2019-10756

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A code execution issue exists in the XML UploadFile Wi-Fi command of the NT9665X Chipset firmware. This is due to a stack-based buffer overflow caused by a specially crafted packet, which...

CVE-2018-4026: Improper Check for Unusual or Exceptional Conditions

An exploitable denial-of-service vulnerability exists in the XMLGetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot...

PT-2019-10762

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A code execution issue exists in the HTTP request-parsing function of the NT9665X Chipset firmware. This is due to an unlimited and arbitrary write to memory caused by a specially crafted...

CVE-2018-4025: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable denial-of-service vulnerability exists in the XMLGetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot...

CVE-2018-4018: Undefined Security Weakness

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server allows for arbitrary firmware binaries to be uploaded which will be flashed upon next reboot. An attacker can send an HTTP PUT request or...

CVE-2018-4029: Out-of-bounds Write

An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code execution...