Описание
The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE.
Ссылки
- Not Applicable
- Broken Link
- Vendor Advisory
- Vendor Advisory
- Not Applicable
- Broken Link
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:parrot:anafi_firmware:1.10.4:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.00373
Низкий
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-404
Связанные уязвимости
CVSS3: 7.5
github
почти 2 года назад
The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE.
EPSS
Процентиль: 59%
0.00373
Низкий
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-404