Dji Mavic 3 Firmware vulnerabilities

4 CVEs affecting Dji Mavic 3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-51456, published 2024-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29945, published 2022-04-29. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
CVE-2023-51454, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a crafted…
CVE-2023-51456, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process…
CVE-2023-51455, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to…