Lucene search

K
nvd[email protected]NVD:CVE-2024-24255
HistoryFeb 06, 2024 - 11:15 p.m.

CVE-2024-24255

2024-02-0623:15:08
CWE-362
web.nvd.nist.gov
7
cve-2024-24255
geofence
mission feasibility checker
drone missions

CVSS3

4.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

0

Percentile

13.3%

A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.

Affected configurations

Nvd
Node
dronecodepx4_drone_autopilotRange1.14.0
VendorProductVersionCPE
dronecodepx4_drone_autopilot*cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:*

CVSS3

4.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

0

Percentile

13.3%

Related for NVD:CVE-2024-24255