DJI Drone Security Assessment Finds No Major Vulnerabilities Amid Ban Debate

DJI has released findings from an independent security assessment conducted by OnDefend, which reported zero critical, high, or medium-risk vulnerabilities in its Air 3S and Matrice 4E drone systems. The assessment, spanning five months, included rigorous testing of hardware, firmware, and software, with no evidence of data transmission outside the U.S. or hidden backdoors. The report identified ten low-risk findings related to application security configurations, but none posed a significant threat to drone operations. DJI is appealing its designation on the FCC Covered List, arguing that the concerns are unfounded and calling for evidence-based policy decisions. The findings are expected to impact thousands of users and businesses reliant on DJI drones for various applications. The assessment was conducted independently, with consumer units purchased without prior notice to DJI.

Key Points: • OnDefend's assessment found no critical or high-risk vulnerabilities in DJI drones. • Ten low-risk findings were identified, primarily related to application security configurations. • DJI is appealing its FCC Covered List designation, citing lack of evidence for security concerns.