CVE-2022-40918: FORCE1RC Discovery Wifi u818a Hd+ Fpv Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368

Affected products

• FORCE1RC Discovery Wifi u818a Hd+ Fpv Firmware: version 2.0.10 only

Published 2022-12-06. Last modified 2026-06-17.