CVE-2018-4014
published 2019-05-13CVE-2018-4014: An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can…
PriorityP358critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.23%
80.6th percentile
An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| anker-in | roav_dashcam_a1_firmware | — | — |
| apache | tika | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.08.0HIGHCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_apache5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w9hg-x4v5-8rjv: An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1
ghsa_unreviewed·2022-05-24
CVE-2018-4014 [CRITICAL] CWE-787 GHSA-w9hg-x4v5-8rjv: An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1
An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
Apache
Apache tika: CVE-2018-11762
vendor_apache·CVSS 5.9
CVE-2018-11762 [MEDIUM] Apache tika: CVE-2018-11762
Apache tika: CVE-2018-11762
Rare Zip Slip Vulnerability in tika-app Tim Allison 0.9-1.18 RIFFReader Infinite Loop in AudioParser in Java 8 and 9 Sergey Bylokhov and Tobias Ospelt ?-1.18 TIKA-2446 OOM detecting OPCPackage files with corrupt ZIP Thorsten Schäfer ?-1.18 PDFBOX-4014 Infinite loop in JBig2 (versions less than 3.0.0) Hanno Böck (if user supplied) ?-1.17
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam
blogs_talos·2019-05-13·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam
## Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam
Lilith >_> of Cisco Talos discovered these vulnerabilities.
## Executive Summary
Cisco Talos is disclosing multiple vulnerabilities in the Anker Roav A1 Dashcam and the Novatek NT9665X chipset. The Roav A1 Dashcam by Anker is a dashboard camera that allows users to connect using the Roav app for Android and iOS so that the users can toggle settings and download videos from the dashcam, along with a host of other features. These vulnerabilities could be leveraged by an attacker to gain arbitrary code execution on affected devices. In accordance with our coordinated disclosure policy, Cisco Talos worked with Novatek to ensure that some of these issues are resolved and that an update is available for affected custo
Talos
Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam
blogs_talos·2019-05-13·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam
Lilith >_> of Cisco Talos discovered these vulnerabilities.
### Executive Summary
Cisco Talos is disclosing multiple vulnerabilities in the Anker Roav A1 Dashcam and the Novatek NT9665X chipset. The Roav A1 Dashcam by Anker is a dashboard camera that allows users to connect using the Roav app for Android and iOS so that the users can toggle settings and download videos from the dashcam, along with a host of other features. These vulnerabilities could be leveraged by an attacker to gain arbitrary code execution on affected devices.
In accordance with our coordinated disclosure policy, Cisco Talos worked with Novatek to ensure that some of these issues are resolved and that an update is available for affected customers. However, we were unable to contact Anker, therefore, TALOS-2018-0685,
2019-05-13
Published