Lucene search

MitreCVE-2024-24255

HistoryFeb 06, 2024 - 11:15 p.m.

CVE-2024-24255

2024-02-0623:15:08

CWE-362

mitre

web.nvd.nist.gov

cve-2024-24255

race condition

geofence.cpp

mission_feasibility_checker.cpp

px4 autopilot

nvd

security vulnerability

CVSS3

4.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

Percentile

13.3%

JSON

A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.

Affected configurations

Nvd

Node

dronecodepx4_drone_autopilotRange≤1.14.0

VendorProductVersionCPE
dronecodepx4_drone_autopilot*cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dronecode	px4_drone_autopilot	*	cpe:2.3:a:dronecode:px4_drone_autopilot::::::::

References

github.com/Drone-Lab/PX4-Autopilot/blob/report-the-faliure-of-precheck/report-the-faliure-of-precheck.md

CVSS3

4.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

Percentile

13.3%

JSON

Related for CVE-2024-24255