Dji Mini 3 Pro Firmware vulnerabilities

4 CVEs affecting Dji Mini 3 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6949, published 2024-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-51454, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a crafted…
CVE-2023-51456, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process…
CVE-2023-51455, published 2024-04-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due to…
CVE-2023-6949, published 2024-04-02. Medium severity, CVSS 5.2. EPSS: 0.2% chance of exploitation in the next 30 days. A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos…