CoreCVE
Back

MEDIUM

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of authentication

Published Apr 2, 2024

Description

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Nozomi
Published Apr 2, 2024
Updated Feb 13, 2025
Reserved Dec 19, 2023
Link CVE-2023-6949
CISA Vulnrichment
Updated Apr 3, 2024
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2023-6949
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-6949