MEDIUM🇵🇱 Wersja polska

CVE-2022-29945

CVSS 4.0v3.1pub. 2022-04-29upd. 2024-11-21

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

  • Dji Air 2

    HW
    Dji
    all versions

  • Dji Air 2 Firmware

    OS
    Dji
    all versions

  • Dji Air 2s

    HW
    Dji
    all versions

  • Dji Air 2s Firmware

    OS
    Dji
    all versions

  • Dji Fhantom 4 Pro

    HW
    Dji
    2.0

  • Dji Fhantom 4 Pro Firmware

    OS
    Dji
    all versions

  • Dji Fpv

    HW
    Dji
    all versions

  • Dji Fpv Firmware

    OS
    Dji
    all versions

  • Dji Inspire 2

    HW
    Dji
    all versions

  • Dji Inspire 2 Firmware

    OS
    Dji
    all versions

  • Dji Mavic 3

    HW
    Dji
    all versions

  • Dji Mavic 3 Firmware

    OS
    Dji
    all versions

  • Dji Mini 2

    HW
    Dji
    all versions

  • Dji Mini 2 Firmware

    OS
    Dji
    all versions

  • Dji Mini Se

    HW
    Dji
    all versions

  • Dji Mini Se Firmware

    OS
    Dji
    all versions

  • Dji Rc Pro

    HW
    Dji
    all versions

  • Dji Rc Pro Firmware

    OS
    Dji
    all versions

  • Dji Zenmuse X5s

    HW
    Dji
    all versions

  • Dji Zenmuse X5s Firmware

    OS
    Dji
    all versions

  • Dji Zenmuse X7

    HW
    Dji
    all versions

  • Dji Zenmuse X7 Firmware

    OS
    Dji
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-26673HIGH7.5same product

An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to ...

CVE-2022-46415CRITICAL9.1PL ✓same vendor

DJI Spark – wyczerpanie puli DHCP uniemożliwiające połączenia

CVE-2020-29664HIGH7.8same vendor

A command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allow...

CVE-2007-1074HIGH9.3same vendor

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to exec...