CVEvulnerability
CVE-2022-46416
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-03-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
Description
Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets.
Affected configurations
• parrot bebop firmware 4.7.1
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-4xx4-r27p-wcrv Third Party Advisory
- https://smartstore.naver.com/chachablues/products/6617613337 Product
- https://smartstore.naver.com/hancomawesome-tech/products/5367473135 Product
- https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-4xx4-r27p-wcrv Third Party Advisory
- https://smartstore.naver.com/chachablues/products/6617613337 Product
- https://smartstore.naver.com/hancomawesome-tech/products/5367473135 Product