Threats tagged 'ghsa-pmrm-8p7v-xvgp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-128907Missing Authentication for a Critical Function Medium4.32026-11-13GCVE DatabaseCVE-2026-128907 CVE-2026-128907 is a vulnerability in the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26 and affected 1300 communications board firmware versions. The service lacks authentication for critical functions, allowing unauthenticated local network attackers to read sensitive device information and change configuration settings via TCP port 16000 or the USB operator port. This vulnerability affects discontinued products with no available firmware fix. Report on CVE-2026-128907 Vulnerability CWE-306 #ghsa-pmrm-8p7v-xvgp	GCVE Database	2026-11-13

Page 1 of 1