CVE-2023-51456
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2_pack_array_to_msg function implemented in the libv2_sdk.so library imported by the v2_sdk_service binary implementing the service, potentially leading to a memory information leak or an arbitrary code execution. Affected models are Mavic 3 Pro until v01.01.0300, Mavic 3 until v01.00.1200, Mavic 3 Classic until v01.00.0500, Mavic 3 Enterprise until v07.01.10.03, Matrice 300 until v57.00.01.00, Matrice M30 until v07.01.0022 and Mini 3 Pro until v01.00.0620.
Un problema de validación de entrada incorrecta que afecta a v2_sdk_service que se ejecuta en un conjunto de dispositivos de drones DJI en el puerto 10000 podría permitir que un atacante active una lectura/escritura fuera de los límites en la memoria del proceso a través de un payload manipulado debido a una falta de verificación de integridad de la entrada en la función v2_pack_array_to_msg implementada en la librería libv2_sdk.so importada por el binario v2_sdk_service que implementa el servicio, lo que podría provocar una pérdida de información de memoria o la ejecución de código arbitrario. Los modelos afectados son Mavic 3 Pro hasta v01.01.0300, Mavic 3 hasta v01.00.1200, Mavic 3 Classic hasta v01.00.0500, Mavic 3 Enterprise hasta v07.01.10.03, Matrice 300 hasta v57.00.01.00, Matrice M30 hasta v07. 01.0022 y Mini 3 Pro hasta v01.00.0620.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2023-12-19 CVE Reserved
- 2024-04-02 CVE Published
- 2024-04-03 EPSS Updated
- 2024-09-30 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
- CWE-125: Out-of-bounds Read
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| DJI Search vendor "DJI" | Mavic 3 Pro Search vendor "DJI" for product "Mavic 3 Pro" | < 01.01.0300 Search vendor "DJI" for product "Mavic 3 Pro" and version " < 01.01.0300" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Mavic 3 Search vendor "DJI" for product "Mavic 3" | < 01.00.1200 Search vendor "DJI" for product "Mavic 3" and version " < 01.00.1200" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Mavic 3 Classic Search vendor "DJI" for product "Mavic 3 Classic" | < 01.00.0500 Search vendor "DJI" for product "Mavic 3 Classic" and version " < 01.00.0500" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Mavic 3 Enterprise Search vendor "DJI" for product "Mavic 3 Enterprise" | < 7.01.10.03 Search vendor "DJI" for product "Mavic 3 Enterprise" and version " < 7.01.10.03" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Matrice 300 Search vendor "DJI" for product "Matrice 300" | < 57.00.01.00 Search vendor "DJI" for product "Matrice 300" and version " < 57.00.01.00" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Matrice M30 Search vendor "DJI" for product "Matrice M30" | < 07.01.0022 Search vendor "DJI" for product "Matrice M30" and version " < 07.01.0022" | en |
Affected
| ||||||
| DJI Search vendor "DJI" | Mini 3 Pro Search vendor "DJI" for product "Mini 3 Pro" | < 01.00.0620 Search vendor "DJI" for product "Mini 3 Pro" and version " < 01.00.0620" | en |
Affected
| ||||||