Command injection

2020-04-0117:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.5%

JSON

Web server running on Parrot ANAFI can be crashed due to the SDK command “Common_CurrentDateTime” being sent to control service with larger than expected date length.

CPENameOperatorVersion
anafi_firmwarelt1.5.0

CPE	Name	Operator	Version
	anafi_firmware	lt	1.5.0

References

www.tenable.com/security/research/tra-2019-22