MitreCVE-2022-46415CVE-2022-46415
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
72.5%
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device’s internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dji | spark | - | cpe:2.3:h:dji:spark:-:*:*:*:*:*:*:* |
| dji | spark_firmware | 01.00.0900 | cpe:2.3:o:dji:spark_firmware:01.00.0900:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
72.5%