DJI CrystalSky ZS600C authorization issue vulnerability

Versions DJI CrystalSky ZS600C from 0.3.9.7 through 0.6.6.9 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization in the system’s privileged DJIUpdateService binder; no authentication or permission checks are performed on the caller during onTransact,...