CyberRota Analysis
AI-GeneratedThe PX4 Autopilot versions up to 1.17.0 are vulnerable to a stack buffer over-read due to inadequate validation of interface name lengths in the netman system command. This flaw allows attackers to supply excessively long interface names, potentially leaking sensitive stack memory or corrupting persistent network configuration files. Organizations utilizing PX4 Autopilot should prioritize patching this vulnerability to mitigate risks associated with data exposure and system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console output or writing it into persistent network configuration files.