CVE-2022-40918

CVSS V2 None CVSS V3 None
Description
Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
Overview
  • CVE ID
  • CVE-2022-40918
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-06T00:15:10
  • Last Modified Date
  • 2022-12-08T15:51:15
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:force1rc:discovery_wifi_u818a_hd\+_fpv_firmware:2.0.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:force1rc:discovery_wifi_u818a_hd\+_fpv:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://1af95112-6fd8-4c8f-8bd6-c47f8ef7b77a.filesusr.com/ugd/c1f861_51eb0d33d5764efc93e9d5f19c306950.pdf
https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-40918
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40918
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:39 Added to TrackCVE
2022-12-07 18:15:34 2022-12-06T00:15:10.157 2022-12-06T00:15:10 CVE Published Date updated
2022-12-07 18:15:34 2022-12-07T00:15:09 CVE Modified Date updated
2022-12-07 18:15:34 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-08 17:15:32 2022-12-08T15:51:15 CVE Modified Date updated
2022-12-08 17:15:32 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-08 17:15:32 CWE-787 Weakness Enumeration new
2022-12-08 17:15:34 CPE Information updated