CVE-2023-47335 Security feature bypass in n/a
Attackers can bypass geo-fence restrictions on Autel Robotics EVO Nano drones to fly into prohibited no-fly zones.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-47335?
CVE-2023-47335 is a medium-severity vulnerability in n/a, published on 16 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones.
Weakness: CWE-276
Which versions are affected by CVE-2023-47335?
It affects 1 product.
Products include Autelrobotics Evo Nano Drone Firmware.
How do I fix CVE-2023-47335?
No fix has been published for CVE-2023-47335 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-47335 being exploited?
There is no known exploitation of CVE-2023-47335 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-5r75-h3m2-34gj.