PT-2023-22174 · Dronescout · Dronescout Ds230

Nicolã² Facchi + 1 · Published 2023-07-11 · Updated 2024-09-30 · CVE-2023-29156

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions DroneScout ds230 versions 20211210-1627 through 20230329-1042

Description The issue is an information loss vulnerability through traffic injection. An attacker can exploit this by injecting spoofed Open Drone ID (ODID) messages, forcing the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and transmit JSON encoded MQTT messages with crafted RID information instead. Consequently, the MQTT broker will have no access to the drones' real RID information.

Recommendations For versions 20211210-1627 through 20230329-1042, as a temporary workaround, consider disabling the reception of Open Drone ID (ODID) messages until a patch is available. Restrict access to the MQTT broker to minimize the risk of exploitation. Avoid using the affected firmware versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-223

Related Identifiers

CVE-2023-29156

Affected Products

Dronescout Ds230

References · 7

• https://osv.dev/vulnerability/CVE-2023-29156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29156 · Security Note
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2023-29156 · Note
• https://t.me/cvenotify/54707 · Telegram Post
• https://download.bluemark.io/dronescout/firmware/history.txt · Note
• https://t.me/cibsecurity/66335 · Telegram Post
• https://t.me/cvenotify/96527 · Telegram Post