Advisories · Technology
DJI Mavic 3.
Every CVE that names DJI Mavic 3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
- DJI Neo
- DJI Neo 2
- Denial of service
- CVSS 8.5 High
DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
- DJI Neo
- DJI Neo 2
- Authentication bypass
- CVSS 8.7 High
DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
- DJI Neo
- DJI Neo 2
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
- DJI Neo
- DJI Neo 2
- Hard-coded credentials
- CVSS 9.4 CriticalCritical · CVSS 9+
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
- DJI Neo
- DJI Neo 2
- Weak cryptography or TLS
- CVSS 6.8 Medium
Out-of-bounds read in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
- CVSS 6.8 Medium
Improper array index validation in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- CWE-129
- CVSS 6.8 Medium
Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
- CVSS 3.0 Low
Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
- CVSS 3.0 Low
Out-of-bounds write in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption
- CVSS 6.6 Medium
DJI Mavic 3 Pro: A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of…
- DJI Mavic 3 Pro
- DJI Mavic 3
- CWE-334
- CVSS 3.0 Low
Buffer overflow in DJI Mavic 3 Pro and others
- DJI Mavic 3 Pro
- DJI Mavic 3
- Memory corruption