CVE-2024-22520

An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-24255

A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...

PT-2024-19464

Name of the Vulnerable Software and Affected Versions Dronetag Drone Scanner version 1.5.2 Description An issue in Dronetag Drone Scanner allows attackers to impersonate other drones via transmission of crafted data packets. Recommendations For Dronetag Drone Scanner version 1.5.2, update to a...

CVE-2024-22520: Authentication Bypass by Spoofing

An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets...

CVE-2024-24255

A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...

CVE-2024-22520

CVE-2024-22520 affects Dronetag Drone Scanner 1.5.2. The issue allows an attacker to impersonate other drones by transmitting crafted data packets, per Red Hat, NVD, CNNVD and related sources. The CVSS v3.1 metrics indicate a NETWORK attack vector, LOW attack complexity, no privileges required, a...

CVE-2023-50121

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service DoS...

Design/Logic Flaw

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service DoS...

CVE-2023-50121

CVE-2023-50121 affects the Autel EVO NANO drone flight control firmware, specifically version 1.6.5. The available documents state a denial of service (DoS) vulnerability but do not provide concrete details on the root cause, vulnerable function/file, or affected hardware variants beyond this fir...

PT-2024-13861 · Autel · Autel Evo Nano Drone Flight Control Firmware

Name of the Vulnerable Software and Affected Versions: Autel EVO NANO drone flight control firmware version 1.6.5 Description: The issue is related to a denial of service DoS in the Autel EVO NANO drone flight control firmware. No information is provided about the estimated number of potentially...

Anduril’s New Drone Killer Is Locked on to AI-Powered Warfare

Autonomous drones are rapidly changing combat. Anduril’s new one aims to gain an edge with jet power and AI...

PT-2023-30421 · Autel Robotics · Autel Robotics Evo Nano

Name of the Vulnerable Software and Affected Versions: Autel Robotics EVO Nano drone version 1.6.5 Description: The issue concerns insecure permissions in the setNFZEnable function, allowing attackers to breach the geo-fence and fly into no-fly zones. Recommendations: For Autel Robotics EVO Nano...

CVE-2023-47335

Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones...

CVE-2023-47335

CVE-2023-47335 affects Autel Robotics EVO Nano drone v1.6.5. The issue is in the setNFZEnable function, where insecure permissions could allow bypassing the geo-fence and entering no-fly zones. Root cause: insecure permissions in the function. Potential impact: breach of restricted airspace as de...

CVE-2023-47625

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

Buffer overflow

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 drone autopilot open source by PX4 Autopilot for Drones. A security vulnerability exists in PX4 autopilot versions prior to 1.14.0 that stems from the presence of a buffer overflow issue...

CVE-2023-46256

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of "parserbufindex" value checking. A malfunction of the sensor device can cause a heap buffer overflow...

CVE-2023-46256

CVE-2023-46256 affects PX4-Autopilot (versions 1.14.0-rc1 and prior). The vulnerability is a heap buffer overflow in the parser function caused by missing validation of the parserbuf_index, allowing writes up to the maximum unsigned int to heap memory. This can lead to unexpected drone behavior, ...