EUVD-2022-49224

Malicious code in bioql PyPI...

Design/Logic Flaw

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46416

CVE-2022-46416 (Parrot Bebop 4.7.1) : The drone is affected by a DHCP pool exhaustion vulnerability that prevents legitimate terminal connections. An attacker must first connect to the device’s internal Wi‑Fi (e.g., via guessing the password) and then send a high volume of DHCP request packets to...

CVE-2022-46416: Allocation of Resources Without Limits or Throttling

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46415

The DJI Spark vulnerability CVE-2022-46415 affects the DJI Spark firmware 01.00.0900. A remote attacker can exploit a DHCP implementation flaw after connecting to the device’s internal Wi‑Fi, exhausting the DHCP IP address pool by sending a high volume of DHCP requests, leading to denial of servi...

CVE-2022-46415: Reliance on IP Address for Authentication

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

PT-2021-5608 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature could allow an authenticated, remote attacker to...