Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2022-29945 Details
Description
DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://twitter.com/d0tslash/status/1519774807776284672 | CVE | Third Party Advisory |
| https://twitter.com/StarFire2258/status/1519767091829637120 | CVE | Third Party Advisory |
| https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking | CVE | Press/Media CoverageThird Party Advisory |
| https://twitter.com/d0tslash/status/1519774807776284672 | [email protected] | Third Party Advisory |
| https://twitter.com/StarFire2258/status/1519767091829637120 | [email protected] | Third Party Advisory |
| https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking | [email protected] | Press/Media CoverageThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-319 | Cleartext Transmission of Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dji mavic 3 firmware | All versions |
CPE
Remediation
| |
| dji mavic 3 | All versions |
CPE
Remediation
| |
| dji rc pro firmware | All versions |
CPE
Remediation
| |
| dji rc pro | All versions |
CPE
Remediation
| |
| dji air 2s firmware | All versions |
CPE
Remediation
| |
| dji air 2s | All versions |
CPE
Remediation
| |
| dji air 2 firmware | All versions |
CPE
Remediation
| |
| dji air 2 | All versions |
CPE
Remediation
| |
| dji mini 2 firmware | All versions |
CPE
Remediation
| |
| dji mini 2 | All versions |
CPE
Remediation
| |
| dji mini se firmware | All versions |
CPE
Remediation
| |
| dji mini se | All versions |
CPE
Remediation
| |
| dji fpv firmware | All versions |
CPE
Remediation
| |
| dji fpv | All versions |
CPE
Remediation
| |
| dji fhantom 4 pro firmware | All versions |
CPE
Remediation
| |
| dji fhantom 4 pro | 2.0 |
CPE
Remediation
| |
| dji inspire 2 firmware | All versions |
CPE
Remediation
| |
| dji inspire 2 | All versions |
CPE
Remediation
| |
| dji zenmuse x7 firmware | All versions |
CPE
Remediation
| |
| dji zenmuse x7 | All versions |
CPE
Remediation
| |
| dji zenmuse x5s firmware | All versions |
CPE
Remediation
| |
| dji zenmuse x5s | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 8, 2023 | CWE Remap | [email protected] |
| May 13, 2022 | Initial Analysis | [email protected] |