CVE-2022-46416

Parrot Bebop 4.7.1

Critical · published March 27, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

🚨 A crafty attacker could lock you out of your Parrot Bebop’s internal network! Just by guessing the Wi-Fi password and flooding it with DHCP requests, they can exhaust the IP address pool. 🔥 Think of it as a party crasher taking up all the seats at a restaurant. Once they've snagged all the reservations, legitimate guests are left standing outside in the cold without a table! This vulnerability could lead to complete chaos as genuine users can’t connect to the device's internal network. Attackers create a denial of service situation, preventing valid connections, which can utterly disrupt operations.

Put simply

Think of it as a party crasher taking up all the seats at a restaurant. Once they've snagged all the reservations, legitimate guests are left standing outside in the cold without a table! CVE-2022-46416 allows remote attackers who connect to the device's internal Wi-Fi network to exhaust the DHCP IP address pool by sending numerous DHCP requests, resulting in denial of service for legitimate users.

What to do

This vulnerability could lead to complete chaos as genuine users can’t connect to the device's internal network. Attackers create a denial of service situation, preventing valid connections, which can utterly disrupt operations. To protect your device, change the Wi-Fi password to something strong and complex to deter unauthorized access. Additionally, consider implementing rate limiting on DHCP requests, and monitor your network for unusual activity. 🔒 You've got this! By following these steps, you'll keep your network safe and secure! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:L/I:L/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00875 · 58.5th percentile
Published
2023-03-27T00:00Z
EPSS history
Timeline
  • 27 MAR 00:00Z
    Parrot Bebop 4.7.1
    cvelistv5