PT-2020-10924 · Parrot · Parrot Anafi

CVE-2019-3945 · Published 2020-04-01 · Updated 2023-09-28

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Parrot ANAFI (affected versions not specified)

Description The web server running on Parrot ANAFI can be crashed due to the SDK command Common CurrentDateTime being sent to the control service with a larger than expected date length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-3945

Affected Products

Parrot Anafi

References · 5

• https://osv.dev/vulnerability/CVE-2019-3945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3945 · Security Note
• https://twitter.com/giammaiot2/status/1707492579967688959 · Twitter Post
• https://tenable.com/security/research/tra-2019-22 · Note
• https://t.me/cibsecurity/10909 · Telegram Post