CVE-2021-34125

Published: Mar 9, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.

Affected (2)

Products: Dronecode: Px4 Drone Autopilot · Yuneec: Mantis Q Firmware

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dronecode Px4 Drone Autopilot	Up to 1.11.3

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Yuneec Mantis Q Firmware	All versions

Running on/with	Platform Versions
Yuneec Mantis Q	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

https://gist.github.com/swkim101/f473b9a60e6d4635268402a2cd2025ac

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/PX4/PX4-Autopilot/issues/17062

Source: cve@mitre.org

ExploitIssue Tracking

https://github.com/PX4/PX4-Autopilot/pull/17264/commits/555f900cf52c0057e4c429ff3699c91911a21cab

Source: cve@mitre.org

Patch

https://github.com/apache/incubator-nuttx-apps/pull/647/commits/2fc1157f8585acc39f13a31612ebf890f41e76ca

Source: cve@mitre.org

Patch

https://github.com/apache/incubator-nuttx/pull/3292/commits/016873788280ca815ba886195535bbe601de6e48

Source: cve@mitre.org

Patch

https://nuttx.apache.org/

Source: cve@mitre.org

Product

https://nuttx.apache.org/docs/latest/applications/nsh/commands.html#access-memory-mb-mh-and-mw

Source: cve@mitre.org

Product

https://www.st.com/resource/en/application_note/dm00493651-introduction-to-stm32-microcontrollers-security-stmicroelectronics.pdf

Source: cve@mitre.org

Product

https://gist.github.com/swkim101/f473b9a60e6d4635268402a2cd2025ac