Threats tagged 'ghsa-6qr4-rvvh-v679'

An improper verification of cryptographic signature vulnerability (CWE-347) exists in the firmware update handler of the management service (uavmonitor_usbv1) on the 1300 communications board of DJI AeroScope Mobile (TP703) firmware 03.00.00.26 and 1300 communications board firmware versions 02.00.07.12 through 02.00.08.40. This flaw allows an unauthenticated attacker on the local network to install modified firmware by supplying any image matching an MD5 checksum without proper signature verification, resulting in persistent root code execution. Exploitation requires network access to TCP port 16000 and that the device is not connected to another controlling host. The vulnerability affects discontinued products with no available fixes.