CVE-2025-10250

LOW EPSS 13.2%
Published Sep 11, 20259mo ago · Modified Jun 17, 20261w ago
1.3 CVSS 4.0
Low
Find Similar
Published Sep 11, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago

Description

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry Channel. Executing manipulation can lead to use of hard-coded cryptographic key . The attacker needs to be present on the local network. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Details

Base Score
1.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
13.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-320
CWE-321

References 4

  • github.com https://github.com/ByteMe1001/DJI-Enhanced-WiFi-Weak-Cryptography
  • vuldb.com https://vuldb.com/?ctiid.323609
  • vuldb.com https://vuldb.com/?id.323609
  • vuldb.com https://vuldb.com/?submit.639757

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.