Home / Technology / DJI Pays $30K for Robot Vacuum Security Flaw
DJI Pays $30K for Robot Vacuum Security Flaw
7 Mar
Summary
- A hacker discovered a network of 7,000 remote-control robots.
- DJI will pay the security researcher $30,000 for their findings.
- Additional vulnerabilities are being addressed and fixed within a month.
A security researcher, Sammy Azdoufal, has been awarded $30,000 by DJI for a significant security discovery involving a network of 7,000 remote-control robots. Azdoufal demonstrated how he could access and control these devices, including DJI's robot vacuums, using a PlayStation gamepad.
DJI has confirmed it has rewarded an unnamed security researcher for their work and has already addressed a vulnerability that allowed viewing a video stream without a security pin by late February. Further system-wide upgrades are underway to patch additional vulnerabilities, with full implementation anticipated within one month.
The company has also published a blog post addressing the security concerns, stating that updates have been deployed to resolve the initial issue. DJI committed to deepening its engagement with the security research community through new collaborative opportunities.
