CVE-2022-29945: Dji Air 2 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.

Affected products

• Dji Air 2 Firmware: affected versions not specified
• Dji Air 2s Firmware: affected versions not specified
• Dji Fhantom 4 Pro Firmware: affected versions not specified
• Dji Fpv Firmware: affected versions not specified
• Dji Inspire 2 Firmware: affected versions not specified
• Dji Mavic 3 Firmware: affected versions not specified
• Dji Mini 2 Firmware: affected versions not specified
• Dji Mini SE Firmware: affected versions not specified
• Dji Rc Pro Firmware: affected versions not specified
• Dji Zenmuse x5s Firmware: affected versions not specified
• Dji Zenmuse x7 Firmware: affected versions not specified

Published 2022-04-29. Last modified 2026-06-17.