Vulnerabilidades en DJI
21 resultadosCVE-2026-114355HIGHDJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as rootEPSS 1.2%CVE-2026-1743LOWDJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replayEPSS 0.4%CVE-2026-78251CRITICALDJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox DirectoryEPSS 0.4%CVE-2026-78255HIGHDJI Drone HTTP Media Server Allows Unauthenticated Access to Stored MediaEPSS 0.4%CVE-2026-114357HIGHDJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)EPSS 0.3%CVE-2026-78306HIGHDJI Drone Bluetooth Interface Unauthenticated DUML Command ExecutionEPSS 0.3%CVE-2023-6951MEDIUMA Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to deriveEPSS 0.3%CVE-2025-10250LOWDJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded keyEPSS 0.3%CVE-2023-51454MEDIUMA Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to EPSS 0.2%CVE-2023-51455MEDIUMA Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow EPSS 0.2%CVE-2023-51456MEDIUMA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2026-78321MEDIUMDJI Drone HTTP Media Server Denial of Service via Connection Pool ExhaustionEPSS 0.2%CVE-2023-6949MEDIUMA Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 EPSS 0.2%CVE-2023-6950LOWAn Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a EPSS 0.2%CVE-2023-6948LOWA Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 coulEPSS 0.2%CVE-2023-51453LOWA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2023-51452LOWA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2026-114353HIGHDJI CrystalSky ZS600C USB-gadget backdoor allows root command executionEPSS 0.2%CVE-2026-114354HIGHDJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as rootEPSS 0.1%CVE-2026-114356HIGHDJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorizationEPSS 0.1%