Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he application tries to copy data into it. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0666
CVE ID: CVE-2018-3999 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-17T04:29:24.304Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a copying operation. Due to the length underflow, the application will then write outside the bounds
d and then used in a copying operation. Due to the length underflow, the application will then write outside the bounds of a stack buffer, resulting in a buffer overflow. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0667
CVE ID: CVE-2018-4000 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-16T17:15:24.553Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: double free code execution Description: An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cause a TTableRow instance to be referenced twice, resulting in a double-free vulnerability when both the references go out of scope. An attacker must convince a victim to open a document in order to trigger this vulnerability. Addi
nces go out of scope. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0668
CVE ID: CVE-2018-4001 State: PUBLISHED Published: 2018-10-01T20:00:00 Last Updated: 2024-08-05T04:57:24.660Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cause an uninitialized pointer representing a TTableRow to be assigned to a variable on the stack. This variable is later dereferenced and then written to allow for controlled heap corruption, which can lead to code execution under the context of the application. An attacker must convince a vic
heap corruption, which can lead to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0669
CVE ID: CVE-2018-4002 State: PUBLISHED Published: 2019-10-31T20:37:17 Last Updated: 2024-08-05T04:57:24.634Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: CUJO Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. When parsing labels in mDNS packets, the firewall unsafely handles label compression pointers, leading to an uncontrolled recursion that eventually exhausts the stack, crashing the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Prog
An unauthenticated attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0671
CVE ID: CVE-2018-4003 State: PUBLISHED Published: 2019-03-21T15:05:44 Last Updated: 2024-08-05T04:57:24.577Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: CUJO Problem Types: heap overflow Description: An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string lengths are handled incorrectly when parsing character strings in mDNS resource records, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
end an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672
CVE ID: CVE-2018-4004 State: PUBLISHED Published: 2019-04-17T14:15:43 Last Updated: 2024-08-05T04:57:24.612Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality. A non-root user is able to kill any privileged process on the system. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0673
CVE ID: CVE-2018-4005 State: PUBLISHED Published: 2019-04-17T14:15:36 Last Updated: 2024-08-05T04:57:24.491Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS
ditional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0674
CVE ID: CVE-2018-4006 State: PUBLISHED Published: 2019-04-17T14:35:06 Last Updated: 2024-08-05T04:57:24.736Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A non-root user is able to write a file anywhere on the system. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to exploit it successfully. Additional Analyst Notes: - CVE Program Container: References: - ht
al access to the machine to exploit it successfully. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0675
CVE ID: CVE-2018-4007 State: PUBLISHED Published: 2019-04-17T14:15:20 Last Updated: 2024-08-05T04:57:24.515Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0676
CVE ID: CVE-2018-4008 State: PUBLISHED Published: 2019-04-15T19:46:21 Last Updated: 2024-08-05T04:57:24.578Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug. Additional Analyst Notes: - CVE Program Con
ker would need local access to the machine to successfully exploit this bug. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0677
CVE ID: CVE-2018-4009 State: PUBLISHED Published: 2019-04-15T19:46:16 Last Updated: 2024-08-05T04:57:24.626Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Shimo VPN Problem Types: local privilege escalation Description: An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018
nal Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0678
CVE ID: CVE-2018-4010 State: PUBLISHED Published: 2018-09-07T15:00:00Z Last Updated: 2024-09-16T17:54:36.228Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Talos Products: ProtonVPN Problem Types: OS command injection Description: An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105319 - https://talosintelligence.com/vulnerability_reports/TALOS-2
ner: References: - http://www.securityfocus.com/bid/105319 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0679
CVE ID: CVE-2018-4011 State: PUBLISHED Published: 2019-03-21T15:42:40 Last Updated: 2024-08-05T04:57:24.498Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: CUJO Problem Types: integer underflow Description: An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the "RDLENGTH" value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintell
sage to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0681
CVE ID: CVE-2018-4012 State: PUBLISHED Published: 2019-01-03T23:00:00 Last Updated: 2024-08-05T04:57:24.532Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Webroot Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud server to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerabili
rability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0683
CVE ID: CVE-2018-4013 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-16T22:24:54.989Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Live Networks Products: LIVE555 Media Server Problem Types: Stack-based buffer overflow Description: An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4
lnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4343 - http://lists.live555.com/pipermail/live-devel/2018-October/021071.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html - https://security.gentoo.org/glsa/202005-06 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0684
CVE ID: CVE-2018-4014 State: PUBLISHED Published: 2019-05-13T15:21:40 Last Updated: 2024-08-05T05:04:28.261Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Anker Problem Types: Stack-based Buffer Overflow Description: An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0685
CVE ID: CVE-2018-4015 State: PUBLISHED Published: 2018-12-18T14:00:00 Last Updated: 2024-08-05T05:04:28.253Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Webroot Problem Types: Improper Certificate Validation Description: An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. An attacker could impersonate a remote BrightCloud server to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulne
this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0686
CVE ID: CVE-2018-4016 State: PUBLISHED Published: 2019-05-13T15:21:45 Last Updated: 2024-08-05T05:04:28.230Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Anker Problem Types: Stack-based Buffer Overflow Description: An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0687
CVE ID: CVE-2018-4017 State: PUBLISHED Published: 2019-05-13T15:21:49 Last Updated: 2024-08-05T05:04:28.253Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Anker Problem Types: Use of Hard-coded Credentials Description: An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1.9. A set of default credentials can potentially be used to connect to the device. An attacker can connect to the AP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0688
CVE ID: CVE-2018-4018 State: PUBLISHED Published: 2019-05-13T15:40:29 Last Updated: 2024-08-05T05:04:28.242Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Novatek Problem Types: External Control of File Name or Path Description: An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server allows for arbitrary firmware binaries to be uploaded which will be flashed upon next reboot. An attacker can send an HTTP PUT request or upgrade firmware request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https
e firmware request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0689
CVE ID: CVE-2018-4019 State: PUBLISHED Published: 2018-12-03T22:00:00Z Last Updated: 2024-09-17T04:18:45.952Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Netgate Products: Netgate pfSense Problem Types: OS command injection Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_normal_mode` parameter. Additiona
ests to the administration web interface. Command injection is possible in the `powerd_normal_mode` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE ID: CVE-2018-4020 State: PUBLISHED Published: 2018-12-03T22:00:00Z Last Updated: 2024-09-16T21:56:37.283Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Netgate Products: Netgate pfSense Problem Types: OS command injection Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_ac_mode` POST parameter parameter
ests to the administration web interface. Command injection is possible in the `powerd_ac_mode` POST parameter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE ID: CVE-2018-4021 State: PUBLISHED Published: 2018-12-03T22:00:00Z Last Updated: 2024-09-17T03:22:31.782Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Netgate Products: Netgate pfSense Problem Types: OS command injection Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_battery_mode` POST parameter. Add
ests to the administration web interface. Command injection is possible in the `powerd_battery_mode` POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE ID: CVE-2018-4022 State: PUBLISHED Published: 2018-10-26T17:00:00 Last Updated: 2024-08-05T05:04:28.270Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: MKVToolNix Problem Types: use-after-free Description: A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0694
CVE ID: CVE-2018-4023 State: PUBLISHED Published: 2019-05-13T15:24:21 Last Updated: 2024-08-05T05:04:28.793Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Novatek Problem Types: Stack-based Buffer Overflow Description: An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0695
CVE ID: CVE-2018-4024 State: PUBLISHED Published: 2019-05-13T15:42:44 Last Updated: 2024-08-05T05:04:28.270Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Novatek Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a null pointer dereference, resulting in a device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0696
CVE ID: CVE-2018-4025 State: PUBLISHED Published: 2019-05-13T15:24:37 Last Updated: 2024-08-05T05:04:28.259Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Novatek Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0697
CVE ID: CVE-2018-4026 State: PUBLISHED Published: 2019-05-13T15:24:31 Last Updated: 2024-08-05T05:04:28.215Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Novatek Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0698
CVE ID: CVE-2018-4027 State: PUBLISHED Published: 2019-05-13T15:40:40 Last Updated: 2024-08-05T05:04:29.492Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Novatek Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or network inputs. An attacker can send a specially crafted packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Contain
acker can send a specially crafted packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0699