Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: DJI Matrice 300, Matrice M30 and 5 more products 01.00.0500, 01.00.0620 and 5 more versions Clear all filters
TI-2023-28110 CVE-2023-51456 · GHSA-5mr8-wmmr-33q3

Out-of-bounds read in DJI Mavic 3 Pro

Priority LOW 32

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a craft…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges User interaction EPSS 0.00245 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-125
TI-2023-28109 CVE-2023-51455 · GHSA-h647-j39p-3c46

Improper array index validation in DJI Mavic 3 Pro

Priority LOW 32

A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to a missing input valid…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges User interaction EPSS 0.00245 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-129
TI-2023-28108 CVE-2023-51454 · GHSA-5vvp-vm6v-3c9p

Out-of-bounds write in DJI Mavic 3 Pro

Priority LOW 32

A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a crafted payload triggering a…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges User interaction EPSS 0.00246 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-787
TI-2023-28107 CVE-2023-51453 · GHSA-79mw-vw7j-7cp5

Out-of-bounds write in DJI Mavic 3 Pro

Priority LOW 14

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missin…

CVSS 3.1LOW 3.0 Adjacent network Low privileges User interaction EPSS 0.0021 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-787
TI-2023-28106 CVE-2023-51452 · GHSA-c7qr-mgc8-q54r

Out-of-bounds write in DJI Mavic 3 Pro

Priority LOW 14

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missin…

CVSS 3.1LOW 3.0 Adjacent network Low privileges User interaction EPSS 0.0021 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-787
TI-2023-06354 CVE-2023-6951 · GHSA-f74c-6mfp-rg2q

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of…

Priority LOW 29

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to the drone’s Wi- Fi netw…

CVSS 3.1MEDIUM 6.6 Adjacent network No auth User interaction EPSS 0.00288 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-334
TI-2023-06351 CVE-2023-6948 · GHSA-9mjv-vwjg-r37p

Buffer overflow in DJI Mavic 3 Pro

Priority LOW 19

A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload tr…

CVSS 3.1MEDIUM 4.1 Adjacent network Low privileges User interaction EPSS 0.0021 Published 2024-04-02 Fixed in 01.01.0300, 01.00.1200 +5 CWE-120