Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Dronecode Component: Micro Air Vehicle Link Clear all filters
TI-2020-08290 CVE-2020-10283 · GHSA-p772-7p8w-gc5x

RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication

Priority MEDIUM 45

The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however according to its documentation, in order to maintain backwards compatibility, GCS and autopilot negotiate the ve…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0147 Published 2020-08-20 No fix listed CWE-288
TI-2020-08289 CVE-2020-10282 · GHSA-cjmc-hc9f-gvg8

RVD#3316: No authentication in MAVLink protocol

Priority MEDIUM 46

The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity spoofing, unauthorized access, PITM attack…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01763 Published 2020-07-03 No fix listed CWE-306