CVE-2022-29945
7.5 highEPSS 0.7%
High (7.5) in dji. EPSS 0.7% chance of exploitation in the next 30 days.
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dji:air_2_firmware
- dji:air_2s_firmware
- dji:fhantom_4_pro_firmware
- dji:fpv_firmware
- dji:inspire_2_firmware
- dji:mavic_3_firmware
- dji:mini_2_firmware
- dji:mini_se_firmware
- dji:rc_pro_firmware
- dji:zenmuse_x5s_firmware
- dji:zenmuse_x7_firmware
References
Check your stackJSON