CVE-2018-4018

State: Published
Severity: 10.0 Critical
Published: May 13, 2019
Updated: Aug 5, 2024
Reserved: Jan 2, 2018

Description

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server allows for arbitrary firmware binaries to be uploaded which will be flashed upon next reboot. An attacker can send an HTTP PUT request or upgrade firmware request to trigger this vulnerability.

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	talos

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Novatekn/a	Anker Roav A1 Dashcam RoavA1SWV1.9Affected

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0689

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.