PT-2020-12032 · Dronecode · Mavlink

Published 2020-08-20 · Updated 2022-10-28 · CVE-2020-10283

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MAVLink versions prior to 2.0

Description The issue concerns the negotiation of the MAVLink protocol version between the Ground Control Station (GCS) and the autopilot. An attacker can manipulate the negotiation process to force the autopilot to use version 1.0 of the protocol, which lacks authentication capabilities. This allows attackers to bypass authentication and directly interact with the autopilot.

Recommendations For MAVLink versions prior to 2.0, consider disabling the AUTOPILOT VERSION message negotiation until a patch is available, and restrict access to the autopilot to minimize the risk of exploitation.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2020-10283

Affected Products

Mavlink

References · 3

• 🔥 https://github.com/aliasrobotics/RVD/issues/3316 · Exploit
• https://osv.dev/vulnerability/CVE-2020-10283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10283 · Security Note