CVE-2020-10281

Technical details about CVE-2020-10281 are not publicly provided in the connected documents; available sources summarize MAVLink plain-text transmission leakage, but no concrete affected versions, fixes, or exploitation specifics are present here. Monitor for updates.

CVE-2020-10282

The CVE-2020-10282 entry concerns MAVLink, where version 1.0 has no authentication or authorization, enabling identity spoofing, unauthorized access, and man-in-the-middle-style attacks on MAVLink-based UAV communications. Some sources note MAVLink 2.0 adds a basic authentication mechanism (e.g.,...

CVE-2020-10283

The CVE-2020-10283 entry concerns MAVLink, a protocol used for UAV ground control and autopilot communication. The root issue is the version negotiation between GCS and autopilot via AUTOPILOT_VERSION, which can cause an attacker to coerce the autopilot to use MAVLink 1.0, a version without authe...