9.1

CVE-2022-46415

Exploit
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dji ≫ Spark Firmware Version01.00.0900
   Dji ≫ Spark Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.91% 0.552
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
cve@mitre.org 9.1 3.1 5.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
CWE-291 Reliance on IP Address for Authentication

The product uses an IP address for authentication.

https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-54q2-3r2m-9pgm
Third Party Advisory
Exploit
https://smartstore.naver.com/chachablues/products/6617613337
Product
https://smartstore.naver.com/hancomawesome-tech/products/5367473135
Product