CZ
Product
CrystalSky ZS600C
5
CVEs
0
On KEV
9.3
Max CVSS
5
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch
Add CrystalSky ZS600C to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114357 New | 9.3 | Oct 23 | DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) Affected: 0.3.9.7 through 0.6.6.9 |
| CVE-2026-114355 New | 8.6 | Oct 23 | DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root Affected: 0.3.9.7 through 0.6.6.9 |
| CVE-2026-114354 New | 8.6 | Oct 23 | DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root Affected: 0.3.9.7 through 0.6.6.9 |
| CVE-2026-114356 New | 7.0 | Oct 23 | DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization Affected: 0.3.9.7 through 0.6.6.9 |
| CVE-2026-114353 New | 7.0 | Oct 23 | DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution Affected: 0.3.9.7 through 0.6.6.9 |
Showing 5