CVE-2023-6951

mediumpriority · track · 0OT risk · elevatedEPSS 0.003 · 21 %ileEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.29% (21st) EPSS

CVSS 6.6 · medium

Is it mine?

21 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-26

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to the drone’s Wi- Fi network. This, in turn, allows the attacker to perform unauthorized interaction with the network services exposed by the drone and to potentially decrypt the Wi-Fi traffic exchanged between the drone and the Android/IOS device of the legitimate user during QuickTransfer mode. Affected models are Mavic 3 Pro until v01.01.0300, Mavic 3 until v01.00.1200, Mavic 3 Classic until v01.00.0500, Mavic 3 Enterprise until v07.01.10.03, Matrice 300 until v57.00.01.00, Matrice M30 until v07.01.0022 and Mini 3 Pro until v01.00.0620.

cvss

Technical severity, 0–10. One row per scoring source.

6.6

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.6mediumAV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.16.6mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.6mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:Nsecondary · prodsec@nozominetworks.comexploitability 2.1 · impact 4

v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1392USCWE-334US

affected products (21)

Products and version ranges known to be affected.

Matrice 300all versionsenisa_euvdEU
Matrice 3000 → 57.00.01.00enisa_euvdEU
Matrice M30all versionsenisa_euvdEU
Matrice M300 → 07.01.0022enisa_euvdEU
Mavic 3all versionsenisa_euvdEU
Mavic 30 → 01.00.1200enisa_euvdEU
Mavic 3 Classicall versionsenisa_euvdEU
Mavic 3 Classic0 → 01.00.0500enisa_euvdEU
Mavic 3 Enterpriseall versionsenisa_euvdEU
Mavic 3 Enterprise0 → 7.01.10.03enisa_euvdEU
Mavic 3 Proall versionsenisa_euvdEU
Mavic 3 Pro0 → 01.01.0300enisa_euvdEU
Mini 3 Proall versionsenisa_euvdEU
Mini 3 Pro0 → 01.00.0620enisa_euvdEU
SZ DJI Technology Co., Ltd DJI Matrice 300≤ 57.00.01.00fstec_bduRU
SZ DJI Technology Co., Ltd DJI Matrice M30≤ 07.01.0022fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3≤ 01.00.1200fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Classic≤ 01.00.0500fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Enterprise≤ 07.01.10.03fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Pro≤ 01.01.0300fstec_bduRU

showing 20 of 21

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2024-04-02modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan