CVE-2024-29460: Medium severity px4 autopilot vulnerability
Published Apr 10, 2024
·Updated
An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the missionblock.cpp component.
Affected Software
2 affected components
PX4 Autopilot
Dronecode Px4 Drone Autopilot=1.14.0
Remediation
Event History
Apr 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-29460?
CVE-2024-29460 has a high severity due to the potential for an attacker to control the flight path of drones.
2
How do I fix CVE-2024-29460?
To fix CVE-2024-29460, upgrade PX4 Autopilot to version 1.14.1 or later, where the vulnerability has been addressed.
3
What impact does CVE-2024-29460 have on users?
CVE-2024-29460 allows attackers to manipulate the home point location, potentially leading to crashes and loss of control of the drone.
4
Which versions of PX4 Autopilot are affected by CVE-2024-29460?
PX4 Autopilot version 1.14.0 is affected by CVE-2024-29460.
5
Is there a workaround for CVE-2024-29460?
Currently, the best approach against CVE-2024-29460 is to upgrade to a patched version of PX4 Autopilot.