Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: DJI Mini 3 Pro 01.00.1200 Clear all filters
TI-2023-06353 CVE-2023-6950 · GHSA-x4q9-mg3c-99rc

An Improper Input Validation vulnerability affecting the FTP service running on the DJI…

Priority LOW 14

An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a malicious packet containing a malformed path provided to the FTP SIZE command th…

CVSS 3.1LOW 3.0 Adjacent network Low privileges User interaction EPSS 0.00211 Published 2024-04-02 Fixed in 01.00.1200 CWE-1286
TI-2023-06352 CVE-2023-6949 · GHSA-68wj-ffg5-qg8c

Missing authentication in DJI Mini 3 Pro

Priority LOW 25

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on t…

CVSS 3.1MEDIUM 5.2 Adjacent network Low privileges User interaction EPSS 0.00236 Published 2024-04-02 Fixed in 01.00.1200 CWE-306