CVE-2024-30800
CVE-2024-30800 is a medium-severity vulnerability in Dronecode Px4 Drone Autopilot with a CVSS 3.x base score of 5.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-229.
Key facts
- Severity: Medium (CVSS 3.x base score 5.6)
- EPSS exploit prediction: 0% (11th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2024-28719
- Weakness: CWE-229
- Affected product: Dronecode Px4 Drone Autopilot
- Published:
- Last modified:
Description
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.
Frequently asked questions
- What is CVE-2024-30800?
- PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.
- How severe is CVE-2024-30800?
- CVE-2024-30800 has a CVSS 3.x base score of 5.6, rated medium severity. It is exploitable over local access with high attack complexity, requires high privileges and user interaction. Impact on confidentiality is none, integrity high, and availability high.
- Is CVE-2024-30800 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (11th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2024-30800?
- CVE-2024-30800 affects Dronecode Px4 Drone Autopilot. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2024-30800?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2024-30800 have an EU (EUVD) identifier?
- Yes. CVE-2024-30800 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-28719.
- When was CVE-2024-30800 published?
- CVE-2024-30800 was published on 2024-04-23 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:dronecode:px4_drone_autopilot:1.14.0:-:*:*:*:*:*:*
More vulnerabilities in Dronecode Px4 Drone Autopilot
- CVE-2026-26742 — High (CVSS 8.1): PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.…
- CVE-2026-26741 — High (CVSS 8.1): PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from…
- CVE-2024-40427 — High (CVSS 7.9): Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this…
- CVE-2026-32708 — High (CVSS 7.8): PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack…
- CVE-2024-38952 — High (CVSS 7.5): PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at…
- CVE-2021-46896 — High (CVSS 7.5): Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function…
All CVEs affecting Dronecode Px4 Drone Autopilot →
Other CWE-229 vulnerabilities
- CVE-2025-7964 — Critical (CVSS 9.2): After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to…
- CVE-2024-39531 — High (CVSS 7.5): An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved…
- CVE-2022-24412 — High (CVSS 7.5): Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network…
- CVE-2022-22562 — High (CVSS 7.5): Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated…
- CVE-2026-4736 — High (CVSS 7.3): Improper Handling of Values vulnerability in No-Chicken Echo-Mate…
- CVE-2024-29460 — Medium (CVSS 6.6): An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone…