CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

Design/Logic Flaw

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46415

The DJI Spark vulnerability CVE-2022-46415 affects the DJI Spark firmware 01.00.0900. A remote attacker can exploit a DHCP implementation flaw after connecting to the device’s internal Wi‑Fi, exhausting the DHCP IP address pool by sending a high volume of DHCP requests, leading to denial of servi...

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...

DJI Spark 安全漏洞

DJI Spark is a drone product from China's DJI that consists of a flying machine, a remote control, a gimbal camera, and a companion DJI GO App. A security vulnerability exists in DJI Spark version 01.00.0900. A remote attacker could exploit this vulnerability to prevent legitimate endpoint...

Serious DJI Drones Flaws Could Crash Drones Mid-flight

By Habiba Rashid During their assessment, the researchers discovered a total of 16 vulnerabilities with a broad range of impacts, from denial of service to arbitrary code execution. This is a post from HackRead.com Read the original post: Serious DJI Drones Flaws Could Crash Drones Mid-flight...

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

Every DJI quadcopter broadcasts its operator's position via radio—unencrypted. Now, a group of researchers has learned to decode those coordinates...

When good-faith hacking gets people arrested, with Harley Geiger: Lock and Code S03E14

When Lock and Code host David Ruiz talks to hackers—especially good-faith hackers who want to dutifully report any vulnerabilities they uncover in their day-to-day work—he often hears about one specific law in hushed tones of fear: the Computer Fraud and Abuse Act. The Computer Fraud and Abuse Ac...

CVE-2022-29945

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...

CVE-2022-29945

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...

Information disclosure

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...

CVE-2022-29945

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol...

CVE-2022-29945

CVE-2022-29945 concerns DJI drone devices (2017–2022) broadcasting unencrypted operator location information via the AeroScope protocol. Affected component: AeroScope data broadcast implementation; root cause: unencrypted location data exposure in AeroScope. Impact stated across sources as privac...

CVE-2020-29664

A command injection issue in djisys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allows for code execution via a malicious firmware upgrade packet...

Command injection

A command injection issue in djisys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allows for code execution via a malicious firmware upgrade packet...

CVE-2020-29664

A command injection issue in djisys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allows for code execution via a malicious firmware upgrade packet...

CVE-2020-29664

DJI Mavic 2 Remote Controller is affected by CVE-2020-29664 due to a command injection in the dji_sys component. The vulnerability allows code execution via a malicious firmware upgrade packet when the controller runs firmware prior to 01.00.0510. The issue is rooted in the firmware upgrade handl...

DJI Mavic 2 Command Injection Vulnerability

The Dji DJI Mavic 2 Remote Controller is a hardware device from Dji Japan. Provides connectivity to other aircraft powered by the Mavic 2 and OcuSync 2.0 to maximize outdoor flight performance. A command injection vulnerability exists in the DJI Mavic 2 Remote Controller. The vulnerability stems...