CVE-2022-40918 describes a critical buffer overflow vulnerability in the lewei_cam firmware (version 2.0.10) of the Force 1 Discovery Wifi U818A HD+ FPV Drone. This flaw allows an unauthenticated attacker to achieve remote code execution with root privileges by sending a specially crafted UDP packet to the drone. With a CVSS score of 9.8 (Critical), the vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation has been observed and there is no public exploit code or significant community discussion, the potential for severe compromise necessitates immediate attention for affected drone owners.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.10CPE matchmatch criteria | cpe:2.3:o:force1rc:discovery_wifi_u818a_hd\+_fpv_firmware:2.0.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.