← Back

Anafi Firmware

anafi_firmware

Vendor: Parrot • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Parrot
1Anafi Firmware
Mar 13, 2025
May 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT com...Show more
The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE.Show less
1Parrot
1Anafi Firmware
Nov 21, 2024
Apr 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Web server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime" being sent to control service with larger than expected date length.
1Parrot
1Anafi Firmware
Nov 21, 2024
Apr 1, 2020
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight.