CVE-2022-40918 - Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet

CRITICAL

Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet

Published Dec 5, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.91%

Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44170		Advisory
https://medium.com/%40meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 5, 2022

Updated Apr 24, 2025

Reserved Sep 19, 2022

CISA Vulnrichment

Updated Apr 24, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 5, 2022

Updated Apr 24, 2025

GitHub

No data