PT-2023-23217 · Bluemark Innovations · Dronescout Ds230 Remote Id Receiver

Nicolã² Facchi + 1 · Published 2023-07-11 · Updated 2024-09-30 · CVE-2023-31191

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions DroneScout ds230 Remote ID receiver from BlueMark Innovations versions 20211210-1627 through 20230329-1042

Description The issue is related to an information loss vulnerability through traffic injection. An attacker can exploit this by injecting high power spoofed Open Drone ID (ODID) messages on carefully selected channels, forcing the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information. Instead, it generates and transmits JSON encoded MQTT messages containing crafted RID information, resulting in the MQTT broker having no access to the drones' real RID information. This affects the adjacent channel suppression algorithm in the firmware.

Recommendations For versions 20211210-1627 through 20230329-1042, consider disabling the adjacent channel suppression algorithm as a temporary workaround until a patch is available. Restrict access to the MQTT broker to minimize the risk of exploitation. Avoid using crafted RID information in JSON encoded MQTT messages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-223

Related Identifiers

CVE-2023-31191

Affected Products

Dronescout Ds230 Remote Id Receiver

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-31191 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31191 · Vendor Advisory
• https://t.me/cvenotify/96529 · Telegram Post
• https://t.me/cibsecurity/66326 · Telegram Post
• https://t.me/cvenotify/54699 · Telegram Post
• https://download.bluemark.io/dronescout/firmware/history.txt · Note
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2023-31191 · Note