CVE-2023-6950

CVSS 3.1 Score 3.0 of 10 (low)

Details

Published Apr 2, 2024
CWE ID 20

Summary

CVE-2023-6950 is an Improper Input Validation vulnerability that affects the FTP service running on the DJI Mavic Mini 3 Pro. This vulnerability allows an attacker to create a malicious packet with a malformed path provided to the FTP SIZE command, leading to a denial-of-service attack on the FTP service itself. The base severity of this vulnerability is rated as LOW, with a base score of 3.0. The exploitability score is 1.5, and it requires low privileges and user interaction. The attack vector is from an adjacent network, and there is no impact on integrity or confidentiality. The availability impact is also rated as LOW, but there is a potential danger of disrupting the FTP service for affected organizations.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6950 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options