Remote Code Execution in SJRC F11 SJ-GPS-PRO Firmware

Executive Summary

CVE-2026-52482 is a high-severity flaw in the SJRC F11 SJ-GPS-PRO drone firmware. It allows unauthenticated remote attackers to gain root shell access via Telnet (TCP port 23) without credentials. The vulnerability occurs because the inetd service spawns a binary that directly executes /bin/sh -l as root. Exploitation requires connecting to the drone's open WiFi network.

Useful 0 Not Useful 0

Detection Guidance

Check if TCP port 23 (Telnet) is open on the drone's WiFi network. Use nmap to scan for open ports: nmap -p 23 <drone-ip>. If port 23 is open, attempt to connect via telnet <drone-ip> 23. If a root shell is accessible without credentials, the system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability enables remote attackers to execute arbitrary commands as root on the drone. Potential impacts include full system control, sensitive information disclosure, and complete compromise of the device. Attackers could modify firmware, steal data, or use the drone as a pivot point for further attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to severe compliance violations under GDPR and HIPAA due to unauthorized root access and potential information disclosure. Unauthorized remote code execution as root may result in unauthorized access to personal data, violating GDPR's data protection requirements. For HIPAA, the flaw could expose protected health information if the drone processes such data, leading to breaches of confidentiality and integrity requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Disable Telnet access by blocking TCP port 23 on the drone's network. Disable the open WiFi access point if not required. Isolate the drone from trusted networks. Monitor for unauthorized connections. Since no patch exists, these are temporary mitigations until a firmware update is available.

Useful 0 Not Useful 0