Matt Foster

Name of the Vulnerable Software and Affected Versions: Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before version 1.1.8 Description: The issue allows unauthenticated "remote power off" actions in broadcast mode via multiple read operations on the ASTM Remote ID (0xFFFA) GATT. This can be exploited through the Drone Go2 mobile application. Recommendations: For Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before version 1.1.8, update the firmware to version 1.1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the ASTM Remote ID (0xFFFA) GATT to minimize the risk of exploitation.

The issue is related to a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This is due to the failure to properly handle CRLF sequences, allowing user-supplied data to be added to HTTP response headers without proper processing. As a result, an attacker can control HTTP response headers and bodies, potentially leading to cross-site scripting attacks and attacks on intermediate proxy servers.