(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| DJI Mini 4 Pro (MT4MFVD)
|
|
Security Grade
Calculator v
|
DJI Mini 4 Pro
Release Date: 2023-12-21 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Few public reports of hardware tampering or modding for this drone model
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Only a small number of historical UAV‑related vulnerabilities reported for DJI ecosystem; no critical dedicated vulnerabilities for Mini4 Pro
|
| Prior attacks
|
None
|
🔗 Proof
|
No publicly documented targeted attacks against DJI Mini4 Pro
|
| Updatability
|
Very common
|
🔗 Proof
|
Firmware can be updated through DJI Fly app and DJI Assistant 2
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Authenticates only with DJI Fly app and DJI cloud account; no native support for third-party enterprise identity systems.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
O4 transmission and control links use modern encryption protocols for flight control and video stream.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Captured media and flight logs stored on SD card can be protected by DJI cloud encryption and local encryption mechanisms.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Account management is performed in DJI cloud backend via DJI Fly; drone itself has no local multi-user account.
|
| Authentication
|
Secure
|
🔗 Proof
|
Drone binds to user DJI account; remote pairing requires authentication; flight safety authorization is cloud-verified.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Repeated failed pairing / authentication attempts trigger connection locking and require account re-verification.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Flight records, location and media logs are saved on cloud and SD card; detailed security audit logs are not fully available locally.
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
DJI cloud account password enforces complexity rules and supports periodic password rotation.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
DJI embedded flight firmware (no public named OS) (Companion App: DJI Fly)
|
| Hardware (CPU / GPU)
|
CPU: Not publicly disclosed • GPU: Integrated within flight SoC, not specified separately
|
| Memory & Storage
|
Memory: RAM specification undisclosed • Storage: Supports microSD card; on-board flash for firmware
|
| Power, Battery & Charging
|
Battery: Intelligent flight lithium-ion battery • Power: 7.36 V DC • Charging: USB‑C charging via DJI charger or power adapter
|
| Display & Camera
|
Display: None (display on remote controller / mobile phone) • Camera: 1/1.3-inch CMOS, 48MP, f/1.7 aperture
|
| Sound & Connectivity
|
Sound: No built‑in speaker • Connectivity: O4 video transmission, Wi‑Fi, GNSS (GPS/BeiDou/Galileo)
|
| Physical (Dimensions & Mass)
|
Dimensions: Folded (without propellers):148 × 94 × 64 mm; Unfolded (with propellers):298 × 373 × 101 mm • Mass: <249 g (with standard battery, propellers and microSD card)
|
DJI Mini 4 Pro (MT4MFVD) is a lightweight consumer UAV with O4 video transmission. It communicates and pairs securely with DJI Fly and DJI cloud service, supporting regular firmware upgrades. Flight control and video data are transmitted over encrypted links. The device is bound to user DJI cloud accounts for authorization, with brute-force lock on repeated authentication failures. No major public vulnerabilities or targeted attacks have been widely reported for this model.
>
