Approved changes feed: RSS · Atom

cpe:2.3:h:anker-in:roav_dashcam_a1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAnker In (c7ff314d-4234-5f9a-b0e9-0de845c7551c)
ProductRoav Dashcam A1 (279097d4-b245-539d-9fb0-8e7284ac519d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-4029 not_vulnerable 2026-06-08 05:11:41.598889 Details available
CRITICAL (10)
An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code execution.
Published: 2019-05-13T15:42:50.000Z
Updated: 2024-08-05T05:04:28.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4028 not_vulnerable 2026-06-08 05:11:41.598284 Details available
MEDIUM (5.3)
An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. The HTTP server could allow an attacker to overwrite the root directory of the server, resulting in a denial of service. An attacker can send an HTTP POST request to trigger this vulnerability.
Published: 2019-05-13T15:40:35.000Z
Updated: 2024-08-05T05:04:28.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4027 not_vulnerable 2026-06-08 05:11:41.597942 Details available
MEDIUM (5.3)
An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or network inputs. An attacker can send a specially crafted packet to trigger this vulnerability.
Published: 2019-05-13T15:40:40.000Z
Updated: 2024-08-05T05:04:29.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4026 not_vulnerable 2026-06-08 05:11:41.597493 Details available
HIGH (7.5)
An exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot.
Published: 2019-05-13T15:24:31.000Z
Updated: 2024-08-05T05:04:28.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4025 not_vulnerable 2026-06-08 05:11:41.597059 Details available
HIGH (7.5)
An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot.
Published: 2019-05-13T15:24:37.000Z
Updated: 2024-08-05T05:04:28.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4024 not_vulnerable 2026-06-08 05:11:41.596483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4023 not_vulnerable 2026-06-08 05:11:41.595903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4018 not_vulnerable 2026-06-08 05:11:41.590336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4017 not_vulnerable 2026-06-08 05:11:41.587573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4016 not_vulnerable 2026-06-08 05:11:41.587021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4014 not_vulnerable 2026-06-08 05:11:41.584661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.