All 5 CVE vulnerabilities found in CrystalSky ZS600C, with AI-generated Chinese analysis, references, and POCs.
Vendor: DJI
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-114357 | DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0) CWE-306 | 9.3 | Critical | 2026-10-23 |
| CVE-2026-114356 | DJI CrystalSky ZS600C DJIUpdateService binder exposes privileged operations without authorization CWE-862 | 7.0 | High | 2026-10-23 |
| CVE-2026-114355 | DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root CWE-78 | 8.6 | High | 2026-10-23 |
| CVE-2026-114354 | DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root CWE-862 | 8.6 | High | 2026-10-23 |
| CVE-2026-114353 | DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution CWE-912 | 7.0 | High | 2026-10-23 |
All 5 known CVE vulnerabilities affecting CrystalSky ZS600C with full Chinese analysis, references, and POCs where available.