CVE-2017-3209

CVE-2017-3209 describes a critical vulnerability in the DBPOWER U818A WIFI quadcopter drone, where its FTP server allows anonymous access with full read/write permissions over its local access point. This flaw enables an attacker within range to access sensitive data like images and videos, or to replace system files, potentially gaining further control. The vulnerability is rated 8.1 HIGH (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N), indicating it can be exploited with low complexity by an unauthenticated attacker on the adjacent network, leading to high confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.