CVE-2018-4027

An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or network inputs. An attacker can send a specially crafted packet to trigger this vulnerability.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:anker-in:roav_dashcam_a1_firmware:1.9:*:*:*:*:*:*:*
cpe:2.3:h:anker-in:roav_dashcam_a1:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:06

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2018-0699 - Exploit, Third Party Advisory () https://talosintelligence.com/vulnerability_reports/TALOS-2018-0699 - Exploit, Third Party Advisory

Information

Published : 2019-05-13 16:29

Updated : 2024-11-21 04:06


NVD link : CVE-2018-4027

Mitre link : CVE-2018-4027

CVE.ORG link : CVE-2018-4027


JSON object : View

Products Affected

anker-in

  • roav_dashcam_a1_firmware
  • roav_dashcam_a1
CWE
CWE-662

Improper Synchronization