M3
Product
Mavic 3
12
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 5Low 3
Watch
Add Mavic 3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77812 | 9.4 | Aug 21 | Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE Affected: through 01.00.1400 |
| CVE-2026-78251 | 9.3 | Aug 24 | DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory Affected: through 01.00.1400 |
| CVE-2026-78255 | 8.7 | Aug 24 | DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media Affected: through 01.00.1400 |
| CVE-2026-78306 | 8.5 | Aug 24 | DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution Affected: through 01.00.1400 |
| CVE-2023-51456 | 6.8 | Apr 2 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound… Affected: before 01.00.1200 |
| CVE-2023-51455 | 6.8 | Apr 2 | A Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to corrupt a controlled… Affected: before 01.00.1200 |
| CVE-2023-51454 | 6.8 | Apr 2 | A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer in the process… Affected: before 01.00.1200 |
| CVE-2023-6951 | 6.6 | Apr 2 | A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate… Affected: before 01.00.1200 |
| CVE-2026-78321 | 6.0 | Aug 24 | DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion Affected: through 01.00.1400 |
| CVE-2023-51453 | 3.0 | Apr 2 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service… Affected: before 01.00.1200 |
| CVE-2023-51452 | 3.0 | Apr 2 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service… Affected: before 01.00.1200 |
| CVE-2023-6948 | 3.0 | Apr 2 | A Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of… Affected: before 01.00.1200 |
Showing 12