What’s Vulnerable › Vulnerabilities
CVE-2022-40918
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-12-06 · updated 2026-06-17
- Weakness: CWE-787
Description
Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
Affected products
References
- https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf
- https://medium.com/%40meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
- https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf
- https://medium.com/%40meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
Get alerted when CVE-2022-40918 or the next vulnerability affects your stack