6 matches found
CVE-2026-52482
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/shfortelnet...
CVE-2026-52482
CVE-2026-52482 affects the SJRC F11 / SJ-GPS-PRO consumer drone (firmware build 2019-09-17, running Linux 3.0.8 on a Fullhan FH8856 ARM SoC). The root cause is the inetd service spawning /app/sh_for_telnet , which exposes an unauthenticated root shell over Telnet (port 23) . A remote attacker con...
CVE-2026-52481
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...
CVE-2026-52481
CVE-2026-52481 affects the SJRC F11 / SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The root cause is a hardcoded backdoor in the tcp_actions() function within the vs_play binary: any TCP packet sent to port 8888 beginning with the bytes da (0x64 0x61) ca...
