infected-drones

受感染的无人机 无人机到地面控制站的攻击向量、漏洞与利用 如今的无人机机群通常是由一名操作员从单一地面站操控数十或数百架无人机。这使得地面控制站成为对手的宝贵目标。飞行员通常位于此处，这里往往存储任务数据，并且是横向移动至 UxS 网络及机群中其他无人机的首要途径。 大多数无人机安全研究都聚焦于攻击无人机本身。受感染的无人机研究采取了另一种方法，重点揭示单架被攻陷的无人机如何攻击与其连接的地面站。由于大多数地面控制软件信任无人机发送的任何内容，缺乏身份验证、校验和清理，使得来自被攻陷无人机的数据可能导致操作员机器上的文件增删改查、代码执行或崩溃。 负责任的使用...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

PT-2026-55304

Name of the Vulnerable Software and Affected Versions ardupilot versions prior to Plane-4.6.4 Description An out-of-bounds read issue exists in the GCS MAVLINK::handle serial control function within the libraries/GCS MAVLink/GCS serial control.cpp file. An out-of-bounds read occurs when a program...

PT-2020-12032 · Dronecode · Mavlink

Name of the Vulnerable Software and Affected Versions: MAVLink versions prior to 2.0 Description: The issue concerns the negotiation of the MAVLink protocol version between the Ground Control Station GCS and the autopilot. An attacker can manipulate the negotiation process to force the autopilot ...