CVE-2018-4028

HIGH

Anker-in Roav Dashcam A1 Firmware - Incorrect Permission Assignment

Title source: rule

Description

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0700

Scores

CVSS v3 7.5

EPSS 0.0027

EPSS Percentile 50.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-732

Status published

Products (1)

anker-in/roav_dashcam_a1_firmware 1.9

Published May 13, 2019

Tracked Since Feb 18, 2026