PT-2023-30421 · Autel Robotics · Autel Robotics Evo Nano

Published 2023-11-16 · Updated 2025-06-11 · CVE-2023-47335

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Autel Robotics EVO Nano drone version 1.6.5

Description The issue concerns insecure permissions in the setNFZEnable function, allowing attackers to breach the geo-fence and fly into no-fly zones.

Recommendations For Autel Robotics EVO Nano drone version 1.6.5, consider disabling the setNFZEnable function until a patch is available to prevent attackers from breaching the geo-fence.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2023-47335

Affected Products

Autel Robotics Evo Nano

References · 5

• https://osv.dev/vulnerability/CVE-2023-47335 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47335 · Security Note
• https://github.com/czbxzm/AUTEL-smart-drones-have-a-vulnerability-to-unauthorised-breaches-of-no-fly-zone · Note
• https://t.me/cvenotify/125391 · Telegram Post
• https://t.me/cvenotify/61524 · Telegram Post