PT-2023-22174 · Dronescout · Dronescout Ds230

Nicolã² Facchi + 1 · Publicado 2023-07-11 · Atualizado 2024-09-30 · CVE-2023-29156

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions DroneScout ds230 versions 20211210-1627 through 20230329-1042

Description The issue is an information loss vulnerability through traffic injection. An attacker can exploit this by injecting spoofed Open Drone ID (ODID) messages, forcing the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and transmit JSON encoded MQTT messages with crafted RID information instead. Consequently, the MQTT broker will have no access to the drones' real RID information.

Recommendations For versions 20211210-1627 through 20230329-1042, as a temporary workaround, consider disabling the reception of Open Drone ID (ODID) messages until a patch is available. Restrict access to the MQTT broker to minimize the risk of exploitation. Avoid using the affected firmware versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-223

Identificadores relacionados

CVE-2023-29156

Produtos afetados

Dronescout Ds230

Referências · 7

• https://nozominetworks.com/labs/vulnerability-advisories-cve-2023-29156 · Nota
• https://t.me/cvenotify/54707 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-29156 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-29156 · Nota de Segurança
• https://download.bluemark.io/dronescout/firmware/history.txt · Nota
• https://t.me/cibsecurity/66335 · Publicação no Telegram
• https://t.me/cvenotify/96527 · Publicação no Telegram