Vulnerabilities in DJI
11 resultsVexday analysis
A DJI tem 11 vulnerabilidades registradas na base, todas de severidade abaixo de crítica, sem evidência de exploração ativa em campo. A fraqueza predominante é escrita fora de limites (CWE-787), típica de falhas de memória, e nenhuma vulnerabilidade foi divulgada nos últimos 90 dias, indicando risco estabilizado. O perfil sugere exposição baixa a média no curto prazo, dependendo do grau de deployment dos produtos afetados.
CVE-2026-1743LOWDJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replayEPSS 0.4%CVE-2023-6951MEDIUMA Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to deriveEPSS 0.3%CVE-2023-51454MEDIUMA Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to EPSS 0.2%CVE-2023-51456MEDIUMA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2023-51455MEDIUMA Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow EPSS 0.2%CVE-2023-6949MEDIUMA Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 EPSS 0.2%CVE-2025-10250LOWDJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded keyEPSS 0.2%CVE-2023-6950LOWAn Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a EPSS 0.2%CVE-2023-51453LOWA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%CVE-2023-6948LOWA Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 coulEPSS 0.2%CVE-2023-51452LOWA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attackEPSS 0.2%