CVE-2023-6951

Published

02 April 2024

Modified

15 April 2026

CVSS Score v3.1 6.6

Click a component to see what it means

Raw vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS Score 0.0029 20th percentile

Risk Priority 48 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-6951 is a medium-severity Small Space of Random Values (CWE-334) vulnerability in Nozominetworks (inferred from references). Its CVSS base score is 6.6 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Junk Data (T1001.001); ranked at the 20th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to IA-5 (Authenticator Management) and SC-12 (Cryptographic Key Establishment and Management) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2023-59147

Vulnerability Data

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate without permission to the drone’s Wi- Fi network. This, in…

turn, allows the attacker to perform unauthorized interaction with the network services exposed by the drone and to potentially decrypt the Wi-Fi traffic exchanged between the drone and the Android/IOS device of the legitimate user during QuickTransfer mode. Affected models are Mavic 3 Pro until v01.01.0300, Mavic 3 until v01.00.1200, Mavic 3 Classic until v01.00.0500, Mavic 3 Enterprise until v07.01.10.03, Matrice 300 until v57.00.01.00, Matrice M30 until v07.01.0022 and Mini 3 Pro until v01.00.0620.

CWE(s): CWE-334

Related Threats

MITRE ATT&CK Enterprise Techniques

T1001.001 Junk Data Command And Control

Adversaries may add junk data to protocols used for command and control to make detection more difficult.

attack.mitre.org →

T1001.002 Steganography Command And Control

Adversaries may use steganographic techniques to hide command and control traffic to make detection efforts more difficult.

attack.mitre.org →

T1001.003 Protocol or Service Impersonation Command And Control

Adversaries may impersonate legitimate protocols or web service traffic to disguise command and control activity and thwart analysis efforts.

attack.mitre.org →

T1003.001 LSASS Memory Credential Access

Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).

attack.mitre.org →

T1003.007 Proc Filesystem Credential Access

Adversaries may gather credentials from the proc filesystem or `/proc`.

attack.mitre.org →

T1008 Fallback Channels Command And Control

Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.

attack.mitre.org →

Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2024-54017Shared CWE-334

CVE-2024-52616Shared CWE-334

CVE-2025-3895Shared CWE-334

CVE-2023-39979Shared CWE-334

CVE-2024-51720Shared CWE-334

CVE-2026-71851Shared CWE-334

CVE-2024-6890Shared CWE-334

Affected Assets

Nozominetworks

—

inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

IA-5 Authenticator Management partial match

IA-5 requires management of authenticator strength which includes ensuring random authenticators have adequate value space.

SC-12 Cryptographic Key Establishment and Management partial match

SC-12 requires proper cryptographic key generation which structurally demands a sufficiently large random value space.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 partial match

blocks

Authentication mechanisms often depend on random values (nonces, tokens), so the control can reduce exposure but eliminating the CWE does not achieve authentication outcomes.

PR.PS-06 partial match

blocks

Secure SDLC practices directly require cryptographically strong RNGs with adequate value space, while fixing only this CWE addresses one narrow aspect of the control.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.19 Installation of software on operational systems partial match

removes

A.8.24 Use of cryptography partial match

blocks

Cryptographic controls require adequate key/seed entropy, directly mitigating small random-value spaces.

A.8.26 Application security requirements partial match

removes

A.8.28 Secure coding partial match

prevents

Secure-coding standards explicitly call for cryptographically strong random number generation.

A.8.29 Security testing in development and acceptance partial match

finds