PT-2024-2604 · Dji · Dji Matrice M30+6

Diego Giubertoni · Published 2024-03-29 · Updated 2024-04-03 · CVE-2023-51455

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI Matrice M30 versions prior to v07.01.0022 DJI Mini 3 Pro versions prior to v01.00.0620

Description The issue is related to an Improper Validation of Array Index in the on receive session packet ack function implemented in the libv2 sdk.so library. This could allow an attacker to corrupt a controlled memory location due to missing input validation, potentially leading to a memory information leak or arbitrary code execution. The vulnerability affects the v2 sdk service running on DJI drone devices on port 10000.

Recommendations For DJI Mavic 3 Pro versions prior to v01.01.0300, update to version v01.01.0300 or later. For DJI Mavic 3 versions prior to v01.00.1200, update to version v01.00.1200 or later. For DJI Mavic 3 Classic versions prior to v01.00.0500, update to version v01.00.0500 or later. For DJI Mavic 3 Enterprise versions prior to v07.01.10.03, update to version v07.01.10.03 or later. For DJI Matrice 300 versions prior to v57.00.01.00, update to version v57.00.01.00 or later. For DJI Matrice M30 versions prior to v07.01.0022, update to version v07.01.0022 or later. For DJI Mini 3 Pro versions prior to v01.00.0620, update to version v01.00.0620 or later. As a temporary workaround, consider disabling the on receive session packet ack function until a patch is available. Restrict access to the libv2 sdk.so library to minimize the risk of exploitation. Avoid using the v2 sdk service on port 10000 until the issue is resolved.

Fix

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2024-02671

CVE-2023-51455

Affected Products

Dji Matrice 300

Dji Matrice M30

Dji Mavic 3

Dji Mavic 3 Classic

Dji Mavic 3 Enterprise

Dji Mavic 3 Pro

Dji Mini 3 Pro

References · 8

• https://bdu.fstec.ru/vul/2024-02671 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-51455 · Security Note
• https://t.me/cvenotify/75456 · Telegram Post
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2023-51455 · Note
• https://twitter.com/VulmonFeeds/status/1775140479090241862 · Twitter Post
• https://twitter.com/RedPacketSec/status/1775449389248500144 · Twitter Post
• https://vuldb.com/?id.259018 · Note
• https://twitter.com/CVEnew/status/1775114058863198642 · Twitter Post