DJI — Vulnerabilities & Security Advisories 11

DJI dominates the consumer and commercial drone market, primarily used for aerial photography, videography, and industrial applications. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from insecure web interfaces and default credentials. Notable security characteristics include extensive data collection practices and potential privacy concerns, though no major public security incidents have been widely reported. The 11 CVEs on record highlight ongoing security challenges, particularly in firmware and web components, emphasizing the need for robust patch management and secure development practices in IoT devices.