Headline

CVE-2023-29156: Information Loss through Traffic Injection – Nozomi Networks

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID (ODID) messages which force the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and, instead, generate and transmit JSON encoded MQTT messages containing crafted RID information. Consequently, the MQTT broker, typically operated by a system integrator, will have no access to the drones’ real RID information.

This issue affects DroneScout ds230 in default configuration from firmware version 20211210-1627 through 20230329-1042.

1 year ago

CVE

Open in Source

#vulnerability #js #intel

CVE-2023-29156

Summary

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection.

Impact

An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID (ODID) messages which force the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and, instead, generate and transmit JSON encoded MQTT messages containing crafted RID information.

Affects

The vulnerability affects:
DroneScout ds230, from firmware version 20211210-1627 to firmware version 20230329-1042

CVSS Details

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L

Solution

Update to firmware version newer than 20230329-1042 and set “transmit_mode=2” in configuration file

Acknowledgments

Nicolò Facchi of Nozomi Networks

**Threat **Intelligence****

****Curated and maintained by Nozomi Networks Labs, the Threat Intelligence™ service provides threat and vulnerability updates to Guardian, making it easy for IT/OT professionals to stay on top of current OT and IoT risks.****

Threat actors love finding new ways to attack critical infrastructure. We love finding new ways to detect their malware before damage occurs.

Andrea Carcano & MorenoCarullo
Co-founders, Nozomi Networks

Let’s get started

Discover how easy it is to anticipate, diagnose and respond to cyber threats and process issues before they impact your operations.