CVE-2026-114356: CWE-862 Missing Authorization in DJI CrystalSky ZS600C
Description
CVE-2026-114356 is a missing authorization vulnerability in the DJI CrystalSky ZS600C firmware versions 0.3.9.7 through 0.6.6.9. It allows a local application without permissions to invoke privileged operations via the 'DJIUpdateService' binder, including factory reset with user-data wipe, shutdown, clock/timezone changes, and firmware update hand-off. This occurs because the onTransact() method does not verify caller identity or permissions.
CVSS v4.0
Score 7.0high
Affected software
DJI
CrystalSky ZS600C
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability arises from a missing authorization check in the system-privileged 'DJIUpdateService' binder interface on DJI CrystalSky ZS600C devices running firmware versions 0.3.9.7 through 0.6.6.9. A local application with no permissions can invoke privileged transactions such as factory reset (transaction 153), shutdown (105), clock/timezone changes (101/123), and firmware-apply hand-off (151) because the onTransact() method lacks caller identity or permission verification. This flaw corresponds to CWE-862 (Missing Authorization).
Potential Impact
An unprivileged local application can perform sensitive privileged operations including factory reset with data wipe, device shutdown, time and timezone changes, and firmware update hand-off. This can lead to denial of service, data loss, and disruption of device operation.
Mitigation Recommendations
No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local application installation to trusted sources and limit local access to the device.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- NCSC.ch
- Date Reserved
- 2026-10-21T08:41:14.430Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6adb689f4d27ba8daa2f82d5
Added to database: 10/23/2026, 14:01:03 UTC
Last enriched: 10/23/2026, 14:15:34 UTC
Last updated: 10/23/2026, 15:26:05 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.