Advisories · Technology
DJI Air 3S.
Every CVE that names DJI Air 3S among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
- DJI Neo
- DJI Neo 2
- Denial of service
- CVSS 8.5 High
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
- DJI Neo
- DJI Neo 2
- Authentication bypass
- CVSS 8.7 High
DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
- DJI Neo
- DJI Neo 2
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
- DJI Neo
- DJI Neo 2
- Hard-coded credentials
- CVSS 9.4 CriticalCritical · CVSS 9+
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
- DJI Neo
- DJI Neo 2
- Weak cryptography or TLS