CVE-2021-44320 affects Parrot AR.Drone versions 1 and 2, which lack adequate protection against denial-of-service (DoS) attacks. An attacker can exploit this weakness by performing IPv4 flood attacks, specifically SYN flooding and UDP flooding, to disrupt device availability. The impact includes loss of video streaming and control functionality. The vulnerability is inherent to the device's networking stack and its inability to mitigate flood-based attacks. No authentication or proximity bypass is required beyond network access. The CVE was published on NVD and supported by research publications and a proof-of-concept repository on GitHub. This affects consumer drones used for recreational and light commercial purposes, placing it in the IoT and network security domain.
