PT-2024-2607 · Dji · Dji Matrice 300 +6

Name of the Vulnerable Software and Affected Versions: DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI...

Drones and the US Air Force

Fascinating analysis of the use of drones on a modern battlefield--that is, Ukraine--and the inability of the US Air Force to react to this change. The F-35A certainly remains an important platform for high-intensity conventional warfare. But the Air Force is planning to buy 1,763 of the aircraft...

CVE-2024-24255

A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...

CVE-2024-24254

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes...

CVE-2024-22519

An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-22520

An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-22519

An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...

Design/Logic Flaw

An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...

Design/Logic Flaw

An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...

Race condition

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 Drone Autopilot for Drones open source. A security vulnerability exists in PX4 Autopilot version 1.14 and earlier. An attacker exploited the vulnerability to send a drone on an unexpected mission...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 Drone Autopilot for Drones open source. A security vulnerability exists in PX4 Drone Autopilot version 1.14 and earlier versions that stems from a lack of a synchronization mechanism for loading geofencing data...

OpenDroneID OSM Security Vulnerability

OpenDroneID OSM is a project to provide low-cost and reliable beaconing capabilities for UAVs so that they can be recognized when within range of a receiver. A security vulnerability exists in OpenDroneID OSM version 3.5.1. Attackers use the vulnerability to impersonate other drones by transmitti...

Dronetag Drone Scanner Security Vulnerability

Dronetag Drone Scanner is an application for scanning the surroundings for data broadcast by drones e.g. identification and localization. It collects data and presents it to the user on a map. A security vulnerability exists in Dronetag Drone Scanner version 1.5.2. An attacker exploited the...

PT-2024-19462 · Unknown · Opendroneid Osm

Name of the Vulnerable Software and Affected Versions: OpenDroneID OSM version 3.5.1 Description: An issue in OpenDroneID OSM allows attackers to impersonate other drones via transmission of crafted data packets. Recommendations: For OpenDroneID OSM version 3.5.1, consider restricting the...

CVE-2024-22520

CVE-2024-22520 affects Dronetag Drone Scanner 1.5.2. The issue allows an attacker to impersonate other drones by transmitting crafted data packets, per Red Hat, NVD, CNNVD and related sources. The CVSS v3.1 metrics indicate a NETWORK attack vector, LOW attack complexity, no privileges required, a...

CVE-2024-22519

An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-24255

A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...

CVE-2024-22520

An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-22519

OpenDroneID OSM 3.5.1 is affected by CVE-2024-22519. Attackers can impersonate other drones by sending crafted data packets. The reported impact includes high integrity risk with network-based access and no confidentiality gain; availability impact is low. Several sources (e.g., PT-2024-19462) no...