Researchers at cybersecurity company Check Point have today shared details Vulnerability-related.DiscoverVulnerability of a vulnerability in DJI ’ s infrastructure that could have given hackers access to consumer and corporate user accounts , personal data , flight logs , photos , videos , and – if the user was flying with DJI ’ s FlightHub application – a live camera feed and map during missions . Check Point submitted a report Vulnerability-related.DiscoverVulnerability to DJI ’ s Bug Bounty Program , highlighting a process in which an attacker could have gained access to a user ’ s account through a vulnerability discovered Vulnerability-related.DiscoverVulnerability in the user identification process within DJI Forum . Check Point ’ s researchers found Vulnerability-related.DiscoverVulnerability that DJI ’ s various platforms used a token to identify registered users across different aspects of the customer experience . Hackers could plant malicious links that would compromise accounts within that framework . In a blog post outlining their investigation , Check Point explained the process of a possible exploit : The vulnerability was accessed through DJI Forum , an online forum DJI runs for discussions about its products . A user who logged into DJI Forum , then clicked a specially-planted malicious link , could have had his or her login credentials stolen Attack.Databreach to allow access to other DJI online assets : DJI ’ s web platform ( account , store , forum ) Cloud server data synced from DJI ’ s GO or GO 4 pilot apps DJI ’ s FlightHub ( centralized drone operations management platform ) We notified Vulnerability-related.DiscoverVulnerability DJI about this vulnerability in March 2018 and DJI responded Vulnerability-related.DiscoverVulnerability responsibly . The vulnerability has since been patched Vulnerability-related.PatchVulnerability . DJI classified Vulnerability-related.DiscoverVulnerability this vulnerability as high risk but low probability , and indicated there is no evidence this vulnerability was ever exploited Vulnerability-related.DiscoverVulnerability by anyone other than Check Point researchers . Check Point even made a Mission Impossible-style trailer for their findings , which is… interesting .