CVE-2021-44319

HighCVSS 7.5

Published: 04/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 05/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

42th percentile - higher than 42% of all known CVEs

Summary

The Parrot AR.Drone 1 and AR.Drone 2 platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect the drone from the controller during mid-flight.

Risk Assessment

The attack can cause loss of control over the drone during flight, leading to potential property damage or regulatory violations.

Recommendation

Apply available firmware updates or secure the Wi-Fi network against unauthorized access.

Other vulnerabilities in Parrot AR.Drone

CVE-2021-44320High
Parrot AR.Drone versions 1 and 2 lack a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm device availability (e.g., video streaming and control) by using tools to perform IPv4 flood attacks, including SYN flooding and UDP flooding.

Original NVD description (English source)

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS