CVE-2022-29945
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
Los dispositivos de drones de DJI vendidos en 2017 hasta 2022, transmiten información no cifrada sobre la ubicación física del operador del dron por medio del protocolo AeroScope
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-29 CVE Reserved
- 2022-04-29 CVE Published
- 2023-11-20 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-319: Cleartext Transmission of Sensitive Information
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://twitter.com/StarFire2258/status/1519767091829637120 | Third Party Advisory | |
| https://twitter.com/d0tslash/status/1519774807776284672 | Third Party Advisory | |
| https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking | Media Coverage |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dji Search vendor "Dji" | Mavic 3 Firmware Search vendor "Dji" for product "Mavic 3 Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Mavic 3 Search vendor "Dji" for product "Mavic 3" | - | - |
Safe
|
| Dji Search vendor "Dji" | Rc Pro Firmware Search vendor "Dji" for product "Rc Pro Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Rc Pro Search vendor "Dji" for product "Rc Pro" | - | - |
Safe
|
| Dji Search vendor "Dji" | Air 2s Firmware Search vendor "Dji" for product "Air 2s Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Air 2s Search vendor "Dji" for product "Air 2s" | - | - |
Safe
|
| Dji Search vendor "Dji" | Air 2 Firmware Search vendor "Dji" for product "Air 2 Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Air 2 Search vendor "Dji" for product "Air 2" | - | - |
Safe
|
| Dji Search vendor "Dji" | Mini 2 Firmware Search vendor "Dji" for product "Mini 2 Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Mini 2 Search vendor "Dji" for product "Mini 2" | - | - |
Safe
|
| Dji Search vendor "Dji" | Mini Se Firmware Search vendor "Dji" for product "Mini Se Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Mini Se Search vendor "Dji" for product "Mini Se" | - | - |
Safe
|
| Dji Search vendor "Dji" | Fpv Firmware Search vendor "Dji" for product "Fpv Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Fpv Search vendor "Dji" for product "Fpv" | - | - |
Safe
|
| Dji Search vendor "Dji" | Fhantom 4 Pro Firmware Search vendor "Dji" for product "Fhantom 4 Pro Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Fhantom 4 Pro Search vendor "Dji" for product "Fhantom 4 Pro" | - | - |
Safe
|
| Dji Search vendor "Dji" | Fhantom 4 Pro Firmware Search vendor "Dji" for product "Fhantom 4 Pro Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Fhantom 4 Pro Search vendor "Dji" for product "Fhantom 4 Pro" | 2.0 Search vendor "Dji" for product "Fhantom 4 Pro" and version "2.0" | - |
Safe
|
| Dji Search vendor "Dji" | Inspire 2 Firmware Search vendor "Dji" for product "Inspire 2 Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Inspire 2 Search vendor "Dji" for product "Inspire 2" | - | - |
Safe
|
| Dji Search vendor "Dji" | Zenmuse X7 Firmware Search vendor "Dji" for product "Zenmuse X7 Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Zenmuse X7 Search vendor "Dji" for product "Zenmuse X7" | - | - |
Safe
|
| Dji Search vendor "Dji" | Zenmuse X5s Firmware Search vendor "Dji" for product "Zenmuse X5s Firmware" | - | - |
Affected
| in | Dji Search vendor "Dji" | Zenmuse X5s Search vendor "Dji" for product "Zenmuse X5s" | - | - |
Safe
|