CVE-2018-4023

An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution.

Score

CVSS 3.0 10.0 Critical

Status

Modified - talos-cna@cisco.com

Published

2019-05-13

Last modified

2024-08-05

Weaknesses

CWE-121, CWE-787

Affected products

• Roav Dashcam A1 Firmware (Anker-in)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0695