CVE-2018-4018

Name of the Vulnerable Software and Affected Versions Anker Roav A1 Dashcam version RoavA1SWV1.9

Description A firmware update issue exists, allowing arbitrary firmware binaries to be uploaded via the HTTP server, which will be flashed upon next reboot. An attacker can exploit this by sending an HTTP PUT request or an upgrade firmware request.

Recommendations For Anker Roav A1 Dashcam version RoavA1SWV1.9, as a temporary workaround, consider restricting access to the HTTP server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.