CVE-2018-4027

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or network inputs. An attacker can send a specially crafted packet to trigger this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-662

Affected software

Vendor	Product	Versions
n/a	Novatek	Anker Roav A1 Dashcam RoavA1SWV1.9

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0699Exploit, Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0699Exploit, Third Party Advisory

Timeline

Published: May 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-40287.5An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1 CVE-2018-40299.8An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker CVE-2018-40307.5An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe br CVE-2018-403110.0An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the saf CVE-2018-40325.5An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with CVE-2018-40335.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with loca CVE-2018-40345.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attack CVE-2018-40355.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attack CVE-2018-40365.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with loca CVE-2018-40375.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with loca CVE-2018-40387.8An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whil CVE-2018-40397.8An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allo