Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Anker-in Clear all filters
TI-2018-02997 CVE-2018-4029 · GHSA-4frv-3h5c-4jvq

Out-of-bounds write in Novatek

Priority MEDIUM 47

An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02853 Published 2019-05-13 No fix listed CWE-787
TI-2018-02992 CVE-2018-4024 · GHSA-2w4q-4463-64h2

NULL pointer dereference in Novatek

Priority LOW 36

An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2019-05-13 No fix listed CWE-476
TI-2018-02996 CVE-2018-4028 · GHSA-8fhx-6cpg-5878

Incorrect permission assignment in Novatek

Priority LOW 36

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01393 Published 2019-05-13 No fix listed CWE-732
TI-2018-02993 CVE-2018-4025 · GHSA-g3rx-mv5m-cpx3

Memory corruption in Novatek

Priority LOW 36

An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2019-05-13 No fix listed CWE-119
TI-2018-02994 CVE-2018-4026 · GHSA-h2jp-r7hc-h3mc

Improper check for unusual conditions in Novatek

Priority LOW 36

An exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01469 Published 2019-05-13 No fix listed CWE-754
TI-2018-02991 CVE-2018-4023 · GHSA-xr27-v8wc-87cr

Out-of-bounds write in Novatek

Priority MEDIUM 47

An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02825 Published 2019-05-13 No fix listed CWE-787
TI-2018-02985 CVE-2018-4017 · GHSA-47xm-jj6p-4p66

Hard-coded credentials in Anker

Priority LOW 39

An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1.9.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00494 Published 2019-05-13 No fix listed CWE-798
TI-2018-02984 CVE-2018-4016 · GHSA-3gqp-pgwc-7wgw

Out-of-bounds write in Anker

Priority LOW 39

An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00707 Published 2019-05-13 No fix listed CWE-787
TI-2018-02982 CVE-2018-4014 · GHSA-w9hg-x4v5-8rjv

Out-of-bounds write in Anker

Priority MEDIUM 46

An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02234 Published 2019-05-13 No fix listed CWE-787