CVE-2021-34125
HIGH 7.5EPSS 1.0%
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 0.96% chance of exploitation in the next 30 days, 61st percentile
- Published
- 2023-03-09
- Updated
- 2025-02-28
Proof-of-concept exploits (2)
- https://gist.github.com/swkim101/f473b9a60e6d4635268402a2cd2025ac
- PX4/PX4-Autopilot/issues/1706212774★ · 2026-10-11
Security advisories
- apache/incubator-nuttx-apps/pull/647/commits/2fc1157f8585acc39f13a31612ebf890f41e76ca
- apache/incubator-nuttx/pull/3292/commits/016873788280ca815ba886195535bbe601de6e48
- https://nuttx.apache.org
- https://nuttx.apache.org/docs/latest/applications/nsh/commands.html#access-memory-mb-mh-a…
- https://www.st.com/resource/en/application_note/dm00493651-introduction-to-stm32-microcon…