CVE-2022-46415

Katalog CVE

CVSS 5.9 · Medium EPSS 0,91%

Kerentanan Reliance on IP Address for Authentication pada dji spark firmware. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network (e.g., by guessing the password). Then, the attacker would need to send many DHCP request packets.

Rincian

Terbit di NVD

27 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-291: Reliance on IP Address for Authentication

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 58,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-54q2-3r2m-9pgm exploit · advisory pihak ketiga
• https://smartstore.naver.com/chachablues/products/6617613337 product
• https://smartstore.naver.com/hancomawesome-tech/products/5367473135 product