Lucene search

K
cveMitreCVE-2022-40918
HistoryDec 06, 2022 - 12:15 a.m.

CVE-2022-40918

2022-12-0600:15:10
CWE-787
mitre
web.nvd.nist.gov
32
cve-2022-40918
buffer overflow
firmware
lewei_cam
remote code execution
udp packet
vulnerability
security
drone
update.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.3%

Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368

Affected configurations

Nvd
Node
force1rcdiscovery_wifi_u818a_hd\+_fpv_firmwareMatch2.0.10
AND
force1rcdiscovery_wifi_u818a_hd\+_fpvMatch-
VendorProductVersionCPE
force1rcdiscovery_wifi_u818a_hd\+_fpv_firmware2.0.10cpe:2.3:o:force1rc:discovery_wifi_u818a_hd\+_fpv_firmware:2.0.10:*:*:*:*:*:*:*
force1rcdiscovery_wifi_u818a_hd\+_fpv-cpe:2.3:h:force1rc:discovery_wifi_u818a_hd\+_fpv:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.3%

Related for CVE-2022-40918