CVE-2022-46416

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:parrot:bebop_firmware:4.7.1:*:*:*:*:*:*:*
cpe:2.3:h:parrot:bebop:-:*:*:*:*:*:*:*

History

03 Apr 2023, 17:08

Type Values Removed Values Added
References (MISC) https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-4xx4-r27p-wcrv - (MISC) https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-4xx4-r27p-wcrv - Third Party Advisory
References (MISC) https://smartstore.naver.com/chachablues/products/6617613337 - (MISC) https://smartstore.naver.com/chachablues/products/6617613337 - Product
References (MISC) https://smartstore.naver.com/hancomawesome-tech/products/5367473135 - (MISC) https://smartstore.naver.com/hancomawesome-tech/products/5367473135 - Product
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.9
CPE cpe:2.3:o:parrot:bebop_firmware:4.7.1:*:*:*:*:*:*:*
cpe:2.3:h:parrot:bebop:-:*:*:*:*:*:*:*
First Time Parrot
Parrot bebop
Parrot bebop Firmware
CWE CWE-770

Information

Published : 2023-03-27 21:15

Updated : 2023-04-03 17:08


NVD link : CVE-2022-46416

Mitre link : CVE-2022-46416


JSON object : View

Products Affected

parrot

  • bebop
  • bebop_firmware
CWE
CWE-770

Allocation of Resources Without Limits or Throttling