Description

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which the firmware update package (.tar.bz2 file) is downloaded. An attacker with the ability to put himself in a Man-in-the-Middle situation (e.g., DNS poisoning, ARP poisoning, control of a node on the route to the endpoint, etc.) can trick the DroneScout ds230 to install a crafted malicious firmware update containing arbitrary files (e.g., executable and configuration) and gain administrative (root) privileges on the underlying Linux operating system. This issue affects DroneScout ds230 firmware from version 20211210-1627 through 20230329-1042.

Severity

 

CVSS Version 3.x CVSS Version 2.0

CVSS 3.x Severity and Metrics:

CNA:  Nozomi Networks Inc.

Base Score:  8.1 HIGH

Vector:  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA.

Note: The NVD and the CNA have provided the same score. When this occurs only the CNA information is displayed, but the Acceptance Level icon for the CNA is given a checkmark to signify NVD concurrence.

CVSS 2.0 Severity and Metrics:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA.

Note: NVD Analysts have not published a CVSS score for this CVE at this time. NVD Analysts use publicly available information at the time of analysis to associate CVSS vector strings.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
https://download.bluemark.io/dronescout/firmware/history.txt	Release Notes
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-31190/	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	NIST   Nozomi Networks Inc.

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

1 change records found show changes

Initial Analysis by NIST 7/19/2023 10:04:56 PM

Action	Type	Old Value	New Value
Added	CPE Configuration		AND OR *cpe:2.3:o:bluemark:dronescout_ds230_firmware:*:*:*:*:*:*:*:* versions from (including) 20211210-1627 up to (including) 20230329-1042 OR cpe:2.3:h:bluemark:dronescout_ds230:-:*:*:*:*:*:*:*
Added	CVSS V3.1		NIST AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Added	CWE		NIST CWE-287
Changed	Reference Type	https://download.bluemark.io/dronescout/firmware/history.txt No Types Assigned	https://download.bluemark.io/dronescout/firmware/history.txt Release Notes
Changed	Reference Type	https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-31190/ No Types Assigned	https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-31190/ Third Party Advisory