Sz-dji-technology-co-ltd
6 CVEs tracked since 2024. Since Apr 2024, none of them reached CISA KEV.
Sz-dji-technology-co-ltd CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-04 | 6 | 0 |
Products
The products that kept showing up in Sz-dji-technology-co-ltd's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Sz-dji-technology-co-ltd.
- CVE-2023-51456A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process...6.8
- CVE-2023-51455A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled memory location due t...6.8
- CVE-2023-51454A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process memory through a craft...6.8
- CVE-2023-6951A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to ...6.6
- CVE-2023-6950An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a malicious packet containing a malformed path provided to ...3.0
- CVE-2023-6949A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos ...5.2
- CVE-2022-46415DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the d...9.1
The record
- Peak rank
- #150 in Apr 2024
- Busiest month shown
- Apr 2024, 6 CVEs
- Months with a KEV entry
- 0 since Apr 2024
- Monthly snapshots
- 1 since 2024