Security News > 2023 > March > Vulnerability in DJI drones may reveal pilot’s location

Serious security vulnerabilities have been identified in multiple DJI drones.

These weaknesses had the potential to allow users to modify crucial drone identification details such as its serial number and even bypass security mechanisms that enable authorities to track both the drone and its pilot.

The team tested three DJI drones of different categories: the small DJI Mini 2, the medium-sized Air 2, and the large Mavic 2.

Because DJI drones are relatively complex devices, the fuzzing had to be performed in the live system.

"Plus, while DJI does take precautions to prevent drones from flying over airports or other restricted areas such as prisons, these mechanisms could also be overridden," Holz continued.

The researchers examined the protocol used by DJI drones to transmit the location of the drone and its pilot so that authorised bodies - such as security authorities or operators of critical infrastructure - can access it.

News URL

https://www.helpnetsecurity.com/2023/03/07/vulnerability-dji-drones-reveal-pilot-location/