CVE-2022-29945 - CVE House

Status published Medium CVE-2022-29945

DJI drone devices sold in 2017 through 2022 broadcast unencrypted...

4 CVSS

Vulnerability Description

DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29945

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from dji

View All →

CVE-2022-46415

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal...

Critical 9.1

CVE-2020-29664

A command injection issue in dji_sys in DJI Mavic 2...

High 7.8

CVE-2007-1074

Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro...

Critical 9.3

Affected Vendor

dji

View all reports →

Affected Software

mavic 3 firmware, rc pro firmware, air 2s firmware, air 2 firmware, mini 2 firmware, mini se firmware, fpv firmware, fhantom 4 pro firmware, inspire 2 firmware, zenmuse x7 firmware, zenmuse x5s firmware

Vulnerable Versions:

Unknown

Timeline

Official Publish: April 29th, 2022

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.