GCVE-110-CERTCC-2017-334207

Advisory PublishedCVSS 7.8/10

Vulnetix · Advisory published April 11, 2017

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.8/10

High · AV:A/AC:L/Au:N/C:C/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.7remediation_levelUreport_confidenceURenvironmental_score4.9825069669872target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-3209

References

DBPOWER U818A WIFI quadcopter drone allows full filesystem permissions to anonymous FTP

url

DBPOWER U818A WIFI quadcopter drone allows full filesystem permissions to anonymous FTP

url

DBPOWER U818A WIFI quadcopter drone allows full filesystem permissions to anonymous FTP

advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON