Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of authentication.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
DJI Mavic 安全漏洞
Vulnerability Description
DJI Mavic是中国大疆（DJI）公司的一系列无人机。 DJI Mavic Mini 3 Pro存在安全漏洞，该漏洞源于存在关键功能缺失身份验证问题，攻击者无需任何类型的身份验证就可以枚举和下载保存在无人机内部或外部存储器上的视频和图片。
CVSS Information
N/A
Vulnerability Type
N/A