PT-2020-10923 · Parrot · Parrot Anafi

Published 2020-04-01 · Updated 2023-09-28 · CVE-2019-3944

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Parrot ANAFI (affected versions not specified)

Description The issue allows remote and unauthenticated attackers to perform a Wi-Fi deauthentication attack, which can disconnect the drone from its controller during mid-flight.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2019-3944

Affected Products

Parrot Anafi

References · 5

• https://osv.dev/vulnerability/CVE-2019-3944 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3944 · Security Note
• https://t.me/cibsecurity/10910 · Telegram Post
• https://twitter.com/giammaiot2/status/1707492579967688959 · Twitter Post
• https://tenable.com/security/research/tra-2019-22 · Note