CVE-2023-6950

Published: Apr 2, 2024Modified: Jun 17, 2026Deferred

3.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.5 / Impact: 1.4

Source: prodsec@nozominetworks.com (Secondary)

Description

An Improper Input Validation vulnerability affecting the FTP service running on the DJI Mavic Mini 3 Pro could allow an attacker to craft a malicious packet containing a malformed path provided to the FTP SIZE command that leads to a denial-of-service attack of the FTP service itself.

Related CWEs

CWE-1286

Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

References (2)

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6950/

Source: prodsec@nozominetworks.com

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-6950/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.