CVE-2018-4028

HIGH

Anker Roav A1 Dashcam Firmware RoavA1SWV1.9 - Denial of Service via HTTP POST Request

Title source: llm

Description

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0700

Scores

CVSS v3 7.5

EPSS 0.0139

EPSS Percentile 68.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-732

Status published

Products (1)

anker-in/roav_dashcam_a1_firmware 1.9

Published May 13, 2019

Tracked Since Feb 18, 2026