CVE-2021-44320

HighCVSS 7.5

Published: 04/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 05/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

Parrot AR.Drone versions 1 and 2 lack a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm device availability (e.g., video streaming and control) by using tools to perform IPv4 flood attacks, including SYN flooding and UDP flooding.

Risk Assessment

A DoS attack can render the drone unusable, potentially disrupting operations and causing financial or reputational damage.

Recommendation

Apply firmware updates or other mitigation measures such as network traffic restrictions and anti-DoS filters to protect the device from flood attacks.

Other vulnerabilities in Parrot AR.Drone

CVE-2021-44319High
The Parrot AR.Drone 1 and AR.Drone 2 platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect the drone from the controller during mid-flight.

Original NVD description (English source)

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., video streaming and control) by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS