CVE-2018-4025

CVE-2018-4025 is a vulnerability in the NT9665X chipset firmware used in the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The XML_GetRawEncJpg Wi‑Fi command can trigger an invalid memory dereference via a crafted packet, causing a reboot. Cisco Talos documents a denial-of-service risk with CVSSv3 scor...

CVE-2018-4025

An exploitable denial-of-service vulnerability exists in the XMLGetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot...

CVE-2018-4026

The CVE-2018-4026 issue affects the NT9665X-based Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The flaw is in the XML_GetScreen Wi‑Fi command: a missing NULL check after a path parsing step can cause a NULL dereference in strncmp, leading to an invalid memory read and device reboot (DoS). Cisco Talos ...

CVE-2018-4023

An exploitable code execution vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution...

CVE-2018-4023

The CVE-2018-4023 issue affects the NT9665X chipset firmware used in the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The vulnerability is in the XML_UploadFile Wi‑Fi command (command 5001) where the fixup_path routine copies user-supplied URL paths into a fixed-size stack buffer without bounds checki...

CVE-2018-4017

An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1.9. A set of default credentials can potentially be used to connect to the device. An attacker can connect to the AP to trigger this vulnerability...

CVE-2018-4017

CVE-2018-4017 (Roav A1 Dashcam) Affects Anker Roav A1 Dashcam Wi‑Fi AP on firmware RoavA1_SW_V1.9. Talos details a default credential vulnerability (CWE-798) enabling an attacker to connect to the device via the Wi‑Fi AP and trigger code execution potential. Documented CVSS v3 metrics for this is...

CVE-2018-4016

CVE-2018-4016 affects the Anker Roav A1 Dashcam (RoavA1_SW_V1.9) where the URL-parsing function can overflow a stack buffer via a crafted packet, enabling code execution. Cisco Talos and Red Hat/NVD entries describe a stack-based buffer overflow in the HTTP URL handling that leads to arbitrary co...

CVE-2018-4016

An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...

CVE-2018-4014

An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...

CVE-2018-4014

The CVE-2018-4014 entry is supported by concrete details from Talos and Red Hat/NVD sources. It describes an exploitable stack-based buffer overflow in the Roav A1 Dashcam wifi command 9999 (WiFiCmd 9999) that can lead to code execution when processing a user-controlled string via an HTTP-like in...

Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam

Lilith Wyatt of Cisco Talos discovered these vulnerabilities. Executive Summary Cisco Talos is disclosing multiple vulnerabilities in the Anker Roav A1 Dashcam and the Novatek NT9665X chipset. The Roav A1 Dashcam by Anker is a dashboard camera that allows users to connect using the Roav app for...

PT-2019-10757

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the thumbnail display functionality of the NT9665X Chipset firmware. It can be exploited by a specially crafted packet, causing a null pointer dereferen...

CVE-2018-4028: Incorrect Permission Assignment for Critical Resource

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POS...

CVE-2018-4017: Use of Hard-coded Credentials

An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1.9. A set of default credentials can potentially be used to connect to the device. An attacker can connect to the AP to trigger this vulnerability...

PT-2019-10755

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A firmware update issue exists, allowing arbitrary firmware binaries to be uploaded via the HTTP server, which will be flashed upon next reboot. An attacker can exploit this by sending an...

PT-2019-10756

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A code execution issue exists in the XML UploadFile Wi-Fi command of the NT9665X Chipset firmware. This is due to a stack-based buffer overflow caused by a specially crafted packet, which...

PT-2019-10754

Name of the Vulnerable Software and Affected Versions Roav A1 Dashcam version RoavA1SWV1.9 Description A vulnerability exists in the Wi-Fi Access Point feature, where a set of default credentials can potentially be used to connect to the device. An attacker can connect to the AP to trigger this...

PT-2019-10752

Name of the Vulnerable Software and Affected Versions Roav A1 Dashcam version RoavA1SWV1.9 Description A code execution issue exists due to a stack-based buffer overflow in the Wi-Fi Command 9999 of the Roav A1 Dashcam. This can be triggered by a specially crafted packet, allowing an attacker to...

PT-2019-10758

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9 Description A denial-of-service issue exists in the XML GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware. It can be exploited by sending a specially crafted packet, which causes an invalid...