CVE-2021-44320
Received Received - Intake

DoS Vulnerability in Parrot AR.Drone via IPv4 Flooding

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: MITRE

Description
Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., video streaming and control) by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2021-44320
EUVD
EUVD-2021-34875

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
parrot ar_drone *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a denial-of-service (DoS) attack on Parrot AR.Drone versions 1 and 2. The device lacks proper protection against network flooding, allowing attackers to disrupt video streaming and control functions by sending excessive traffic such as SYN or UDP floods.

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for SYN or UDP flooding attacks targeting the Parrot AR.Drone. Use tools like Wireshark or tcpdump to capture and analyze traffic patterns. Commands such as 'tcpdump -i eth0 -n udp portrange 5554-5556' or 'tcpdump -i eth0 -n 'tcp[tcpflags] & (tcp-syn) != 0 and tcp[tcpflags] & (tcp-ack) == 0'' can help identify suspicious flooding activity.

Impact Analysis

The vulnerability can cause device unavailability, interrupting video feeds and control operations. This may lead to loss of functionality during critical operations, affecting user experience and operational reliability.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it relates to device availability disruption rather than data privacy or security controls. However, availability issues could indirectly impact systems handling regulated data by causing disruptions in monitoring or operational continuity.

Mitigation Strategies

Immediate mitigation includes deploying firewalls or intrusion prevention systems (IPS) to block excessive SYN or UDP traffic. Configure rate limiting on network devices to restrict flood traffic. Ensure the Parrot AR.Drone is isolated on a dedicated network segment to limit exposure. Update firmware if patches are available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2021-44320. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart