CVE-2021-44320CWE-400denial-of-service

CVE-2021-44320

High · published September 4, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., video streaming and control) by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-09-04T22:17Z
References (3)
https://github.com/gubertoli/cve/tree/main/CVE-2021-44320 · [email protected]https://www.researchgate.net/publication/257681090_ARDrone_corruption · [email protected]https://www.researchgate.net/publication/313177418_The_Impact_of_DoS_Attacks_on_the_ARDrone_20 · [email protected]
EPSS history
Timeline
  • 06 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 04 SEP 00:00Z
    Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks
    cvelistv5