{"id":"CVE-2021-34125","aliases":["EUVD-2021-20788","GHSA-hjmv-7x32-qx8w"],"status":"published","title":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to...","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0096,"percentile":0.61996,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2023-03-09T00:00:00Z","modified":"2026-10-20T10:54:56Z","products":[{"vendor":"dronecode","product":"px4_drone_autopilot"},{"vendor":"yuneec","product":"mantis_q_firmware"}],"references":[{"url":"https://nuttx.apache.org/docs/latest/applications/nsh/commands.html#access-memory-mb-mh-and-mw","tags":["x_transferred","Product","web"]},{"url":"https://www.st.com/resource/en/application_note/dm00493651-introduction-to-stm32-microcontrollers-security-stmicroelectronics.pdf","tags":["x_transferred","Product","web"]},{"url":"https://nuttx.apache.org/","tags":["x_transferred","Product","web"]},{"url":"https://gist.github.com/swkim101/f473b9a60e6d4635268402a2cd2025ac","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://github.com/PX4/PX4-Autopilot/pull/17264/commits/555f900cf52c0057e4c429ff3699c91911a21cab","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/apache/incubator-nuttx/pull/3292/commits/016873788280ca815ba886195535bbe601de6e48","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/apache/incubator-nuttx-apps/pull/647/commits/2fc1157f8585acc39f13a31612ebf890f41e76ca","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/PX4/PX4-Autopilot/issues/17062","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34125"},{"url":"https://nuttx.apache.org"},{"url":"https://github.com/advisories/GHSA-hjmv-7x32-qx8w"}],"sources":{"cve":[{"id":"CVE-2021-34125","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","status":"published","published":"2023-03-09T00:00:00Z","modified":"2025-02-28T17:33:01.625Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:11.244759Z"}],"euvd":[{"id":"EUVD-2021-20788","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","status":"published","published":"2023-03-09T00:00:00Z","modified":"2025-02-28T17:33:01Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"none"}],"updated_at":"2026-11-02T20:53:19.492993Z"}],"ghsa":[{"id":"GHSA-hjmv-7x32-qx8w","title":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to...","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","status":"published","published":"2023-03-10T00:30:15Z","modified":"2025-02-28T18:31:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:00:05.050542Z"}],"nvd":[{"id":"CVE-2021-34125","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","status":"published","published":"2023-03-09T23:15:10.657Z","modified":"2026-06-17T03:55:29.943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:07.323379Z"}],"osv":[{"id":"CVE-2021-34125","description":"An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.","status":"published","published":"2023-03-09T23:15:10.657Z","modified":"2026-10-20T10:54:56.60866491Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:20.13324Z"}]}}