Skip to content
OpenAdvisories
Critical · 10.0 CVE-2018-4023 EUVD-2018-15809GHSA-xr27-v8wc-87cr

An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anke…

Published May 13, 2019 · Updated Aug 5, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution.

Affected products

VendorProductAffectedFixed
— Novatek Anker Roav A1 Dashcam RoavA1SWV1.9 —

References