CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-51456
https://notcve.org/view.php?id=CVE-2023-51456
02 Apr 2024 — A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2_pack_array_to_msg function implemented in the libv2_sdk.so library imported by the v2_sdk_service binary implementing the service, potentially leading to a memory information leak or an arbitrary code execution. Affected models are Mav... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-51456 • CWE-20: Improper Input Validation CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-51455
https://notcve.org/view.php?id=CVE-2023-51455
02 Apr 2024 — A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to a missing input validation in the on_receive_session_packet_ack function implemented in the libv2_sdk.so library used by the dji_vtwo_sdk binary implementing the service, potentially leading to a memory information leak or to an arbitrary code execution. Affected models are Mavic 3 Pro until v01.01.0300, Mavic 3... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-51455 • CWE-129: Improper Validation of Array Index •
CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-51454
https://notcve.org/view.php?id=CVE-2023-51454
02 Apr 2024 — A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a crafted payload triggering an unsafe memory write operation in the my_tcp_receive function implemented in the libv2_sdk.so library used by the dji_vtwo_sdk binary implementing the service, potentially leading to a memory information leak or to an arbitrary code execution. Affected models are Mavic 3 Pro until v01.01.03... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-51454 • CWE-787: Out-of-bounds Write •
CVSS: 3.0EPSS: 0%CPEs: 7EXPL: 0CVE-2023-51453
https://notcve.org/view.php?id=CVE-2023-51453
02 Apr 2024 — A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the process_push_file function implemented in the libv2_sdk.so library used by the dji_vtwo_sdk binary implementing the service, compromising it in a term of availability and producing a denial-of-service attack. Affected models are Mavic 3 Pro until v01.01.0300, Mavic ... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-51453 • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •
CVSS: 3.0EPSS: 0%CPEs: 7EXPL: 0CVE-2023-51452
https://notcve.org/view.php?id=CVE-2023-51452
02 Apr 2024 — A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the pull_file_v2_proc function implemented in the libv2_sdk.so library used by the dji_vtwo_sdk binary implementing the service, compromising it in a term of availability and producing a denial-of-service attack. Affected models are Mavic 3 Pro until v01.01.0300, Mavic ... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-51452 • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •
CVSS: 6.6EPSS: 0%CPEs: 7EXPL: 0CVE-2023-6951
https://notcve.org/view.php?id=CVE-2023-6951
02 Apr 2024 — A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to the drone’s Wi- Fi network. This, in turn, allows the attacker to perform unauthorized interaction with the network services exposed by the drone and to potentially decrypt the Wi-Fi traffic exchanged between the drone and the Android/IOS device of the legitimate user during QuickTransfer mode. Affected models are... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6951 • CWE-334: Small Space of Random Values CWE-1391: Use of Weak Credentials •
CVSS: 3.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-6950
https://notcve.org/view.php?id=CVE-2023-6950
02 Apr 2024 — An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a malicious packet containing a malformed path provided to the FTP SIZE command that leads to a denial-of-service attack of the FTP service itself. ** EN DISPUTA ** Una vulnerabilidad de validación de entrada incorrecta que afecta el servicio FTP que se ejecuta en el DJI Mavic Mini 3 Pro podría permitir a un atacante crear un paquete malicioso que contenga una ruta mal fo... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6950 • CWE-20: Improper Input Validation CWE-1286: Improper Validation of Syntactic Correctness of Input •
CVSS: 5.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-6949
https://notcve.org/view.php?id=CVE-2023-6949
02 Apr 2024 — A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of authentication. ** EN DISPUTA ** Un problema de falta de autenticación para funciones críticas que afecta el servicio HTTP que se ejecuta en el DJI Mavic Mini 3 Pro en el puerto estándar 80 podría permitir a un atacante enume... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6949 • CWE-306: Missing Authentication for Critical Function •
CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2023-6948
https://notcve.org/view.php?id=CVE-2023-6948
02 Apr 2024 — A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the sdk_printf function implemented in the libv2_sdk.so library used by the dji_vtwo_sdk binary implementing the service, compromising it in a term of availability and producing a denial-of-service attack. Affected models are Mavic 3 Pro until v01.01.03... • https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6948 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0CVE-2022-29945
https://notcve.org/view.php?id=CVE-2022-29945
29 Apr 2022 — DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol. Los dispositivos de drones de DJI vendidos en 2017 hasta 2022, transmiten información no cifrada sobre la ubicación física del operador del dron por medio del protocolo AeroScope • https://twitter.com/StarFire2258/status/1519767091829637120 • CWE-319: Cleartext Transmission of Sensitive Information •