Vendor
DJI
21 known vulnerabilities.
Products
Mini 3 Pro 14
Mavic 3 12
Mavic 3 Classic 12
Mavic 3 Pro 12
Mavic 3 Enterprise 7
Matrice 300 7
Matrice M30 7
CrystalSky ZS600C 5
Neo 5
Neo 2 5
Air 3 5
Air 3S 5
Avata 2 5
Avata 360 5
Mavic 4 Pro 5
Mini 2 5
Mini 3 5
Mini 4 Pro 5
Mini 5 Pro 5
Flip 4
Mavic Mini 2
DJI Flip 1
Air 1
Spark 1
Mini SE 1
Mavic Spark 1
Mavic Air 1
7 results · Clear filters · Feed
-
Medium 6.0
DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, pre…
-
Medium 5.0
DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key
A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry Channel. Executing manipulation can lead to use of hard-coded cryptographic key . The attacker needs to be prese…
-
Medium 6.8
A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 …
-
Medium 6.8
A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the po…
-
Medium 6.8
A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could …
-
Medium 6.6
A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remo…
-
Medium 5.2
A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on …