Pro DJ Link Security Vulnerability

AlphaTheta has disclosed a Pro DJ Link security vulnerability affecting specific CDJ and XDJ players and Rekordbox for iOS and Android. The affected players are CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, XDJ-1000MK2, XDJ-700, and the XDJ-AZ and XDJ-XZ all-in-one units, and the notice named Rekordbox for iOS and Rekordbox for Android. The company said mixers are not affected.

AlphaTheta described the issue as a flaw in the Pro DJ Link network protocol that ties Rekordbox and CDJ/XDJ hardware together. The notice warned that a third party who gains unauthorised access to a Pro DJ Link network could view data stored on a connected Windows PC or Mac or on USB and SD cards plugged into a CDJ or XDJ on that network. AlphaTheta said technical details will be withheld until fixes are ready.

AlphaTheta listed fixes for the affected players as in progress and said firmware updates will be announced by its partner when they land. The company advised updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, noting those releases are partly patched already. It advised avoiding the use of USB or SD cards containing sensitive files when operating a linked setup and recommended that any player connected to a Wi‑Fi network be placed on a password‑protected network. The notice added that there have been no reports of anyone being affected so far and that for home use or small gigs the chances of someone gaining access to a Pro DJ Link network to view files are slim.

AlphaTheta published a notice warning of a Pro DJ Link security vulnerability in the network protocol that ties Rekordbox and CDJ/XDJ players together. The notice said a third party who gains unauthorized access to a Pro DJ Link network could view data stored on a connected Windows PC or Mac or on USB and SD cards plugged into a CDJ or XDJ on that network.

The affected players listed are CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, XDJ-1000MK2, XDJ-700, and the XDJ-AZ and XDJ-XZ all-in-ones, and the notice also named Rekordbox for iOS and Rekordbox for Android. The notice said mixers are not affected and that technical details will be withheld until fixes are released, and it added that there have been no reports of anyone being affected so far.

AlphaTheta said fixes for the players are in progress and that the partner will announce when firmware updates land. The company advised users to update Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and noted those releases are partly patched already.

It advised avoiding the use of USB or SD cards containing sensitive files when using a linked setup and recommended ensuring any player connected to a Wi‑Fi network is on a password‑protected network. For home use or small gigs the notice said the chances of someone gaining access to a Pro DJ Link network to view files are slim.

AlphaTheta advised updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and noted those Rekordbox releases are partly patched already. The company recommended avoiding the use of USB or SD cards that contain any sensitive files when operating a linked Pro DJ Link setup.

It also advised that any player connected to a Wi‑Fi network be placed on a password‑protected network. AlphaTheta stated that technical details of the issue will be withheld until fixes are available.

AlphaTheta listed fixes for the affected players as in progress and said its partner will announce when firmware updates land. The notice presented the above steps as interim precautions to reduce exposure while player firmware updates are developed. The company encouraged users to apply the recommended precautions until official firmware updates are published. AlphaTheta advised following partner announcements for firmware availability and distribution.

AlphaTheta has stated there are currently no reports of anyone being affected by the Pro DJ Link security vulnerability. The company described the issue as a vulnerability in the Pro DJ Link network protocol and said technical details will be withheld until fixes are ready. AlphaTheta noted that fixes for the affected players are in progress and that firmware updates will be announced publicly when they are available.

AlphaTheta advised updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and described those releases as partly patched already. The company said it will announce when player firmware updates land and encouraged users to follow those notices. AlphaTheta also reiterated practical precautions for linked setups while fixes are being prepared.

AlphaTheta has disclosed a Pro DJ Link security vulnerability affecting the Pro DJ Link network protocol. The notice said a third party who gains unauthorised access to a Pro DJ Link network could view data stored on a connected Windows PC or Mac, or on USB and SD cards plugged into a CDJ or XDJ on that network. The company said technical details will be withheld until fixes are available.

The notice identified the affected hardware as CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, XDJ-1000MK2, XDJ-700, XDJ-AZ and XDJ-XZ, and named Rekordbox for iOS and Rekordbox for Android as affected software. The notice also stated that mixers are not affected. AlphaTheta reported there have been no reports of anyone being affected so far.

AlphaTheta listed fixes for the affected players as in progress and said the partner will announce when firmware updates land. The company advised updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and noted those releases are partly patched already. It recommended avoiding the use of USB or SD cards containing sensitive files when operating a linked setup and advised that any player on a Wi‑Fi network be placed on a password‑protected network. The notice added that for home use or small gigs the chances of someone getting onto a Pro DJ Link network to access files are slim.

A third party who gains unauthorised access to a Pro DJ Link network could view data stored on a connected Windows PC or Mac, or on USB and SD cards plugged into a CDJ or XDJ on that network.

The affected players are the CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, XDJ-1000MK2 and XDJ-700, plus the XDJ-AZ and XDJ-XZ all-in-ones, and Rekordbox for iOS and Android.

Avoid using USB or SD cards with anything sensitive on them when you’re playing on a linked set-up.

If your player is on a Wi-Fi network, make sure that network has a password.

We’ll let you know when the firmware updates land.

CONCLUSION

CONCLUSION

CONCLUSION

AlphaTheta disclosed a Pro DJ Link security vulnerability affecting specific CDJ and XDJ players and Rekordbox for iOS and Android and said technical details will be withheld until fixes are available. The company stated mixers are not affected and reported there have been no reports of anyone being affected so far.

AlphaTheta listed fixes for the affected players as in progress and said firmware updates will be announced when they land. The company recommended updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, avoiding the use of USB or SD cards that contain sensitive files on linked setups, and ensuring any player connected to a Wi‑Fi network is on a password‑protected network.

The notice added that for home use or small gigs the chances of someone gaining access to a Pro DJ Link network to view files are slim.

AlphaTheta published a notice warning of a Pro DJ Link security vulnerability in the network protocol that ties Rekordbox and CDJ/XDJ players together. The notice said “a third party who gains unauthorised access to a Pro DJ Link network could view data stored on a connected Windows PC or Mac, or on USB and SD cards plugged into a CDJ or XDJ on that network.” The company stated technical details will be withheld until a fix is available and reported there have been no reports of anyone being affected so far. The notice identified the issue specifically as relating to the Pro DJ Link network protocol used when those products are linked.

The notice listed the affected players as the CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X and CDJ-900NXS, and the XDJ-1000MK2 and XDJ-700, plus the XDJ-AZ and XDJ-XZ all-in-one units, and it named Rekordbox for iOS and Rekordbox for Android as affected software. The notice said mixers are not affected. AlphaTheta advised updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and noted those Rekordbox releases are partly patched already. The notice listed fixes for the affected players as in progress.

AlphaTheta advised avoiding the use of USB or SD cards containing anything sensitive when using a linked Pro DJ Link setup and recommended that any player connected to a Wi‑Fi network be on a password‑protected network. The notice said that for home use or small gigs the chances of someone getting onto a Pro DJ Link network to access files are slim. The company said fixes for the players are in progress and that the partner will announce when firmware updates land. The notice repeated that technical details will be withheld until fixes are available.

AlphaTheta recommends updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and notes those Rekordbox releases are partly patched already. The company advises avoiding the use of USB or SD cards that contain any sensitive files when operating a linked Pro DJ Link setup. It also recommends that any player connected to a Wi‑Fi network be placed on a password‑protected network, and that users apply these precautions while fixes are prepared.

AlphaTheta said technical details of the issue will be withheld until fixes are ready and that fixes for the affected players are currently listed as in progress. The notice said firmware updates for affected players will be announced by the partner when they land and encouraged users to follow those announcements. The company presented these recommendations as interim measures to reduce exposure while player firmware updates are developed and distributed.

Pro DJ Link Security Vulnerability

AlphaTheta disclosed a Pro DJ Link security vulnerability affecting specific CDJ and XDJ players and Rekordbox for iOS and Android. The affected hardware listed in the notice comprises CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X and CDJ-900NXS, and XDJ-1000MK2 and XDJ-700, plus the XDJ-AZ and XDJ-XZ all‑in‑one units, and the notice named Rekordbox for iOS and Rekordbox for Android as affected software. The company identified the issue as relating to the Pro DJ Link network protocol used when those products are linked together. The notice stated that mixers are not affected.

The notice described the vulnerability as a flaw in the Pro DJ Link network protocol that could allow an unauthorized third party on a Pro DJ Link network to view data stored on a connected Windows PC or Mac, or on USB and SD cards plugged into a CDJ or XDJ on that network. The notice said technical details of the issue will be withheld until a fix is available. The company reported there have been no reports of anyone being affected so far.

AlphaTheta listed fixes for the affected players as in progress and said firmware updates will be announced by its partner when they land. The notice identified Rekordbox versions 7.2.17 or later and 6.8.7 or later as releases that are partly patched already. The company said it will announce when player firmware updates are available.

The notice recommended updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later where applicable, avoiding the use of USB or SD cards containing sensitive files when operating a linked setup, and ensuring any player connected to a Wi‑Fi network is on a password‑protected network. The notice added that for home use or small gigs the chances of someone gaining access to a Pro DJ Link network to view files are slim.

Pro DJ Link Security Vulnerability — Impact and Current Status

AlphaTheta published a notice warning of a security vulnerability in Pro DJ Link, the network protocol that connects Rekordbox and CDJ/XDJ hardware. The notice listed the specific affected players as CDJ-3000X, CDJ-3000, CDJ-2000NXS2, CDJ-1500X, CDJ-900NXS, and XDJ-1000MK2 and XDJ-700, plus the XDJ-AZ and XDJ-XZ all-in-one units, and it named Rekordbox for iOS and Rekordbox for Android as affected software. The notice stated that mixers are not affected. The disclosure described the issue as relating to the Pro DJ Link network protocol used when those products are linked together.

The notice said the vulnerability could allow a third party who gains unauthorized access to a Pro DJ Link network to view data stored on a connected Windows PC or Mac, or on USB and SD cards plugged into a CDJ or XDJ on that network. The company stated that technical details of the issue will be withheld until a fix is available. The notice reported there have been no reports of anyone being affected so far. AlphaTheta identified the risk specifically as data exposure on connected devices and removable storage when systems are linked via Pro DJ Link.

In terms of remediation status, the notice listed fixes for the affected players as in progress. The company recommended updating Rekordbox to version 7.2.17 or later, or 6.8.7 or later, and described those Rekordbox releases as partly patched already. The notice said firmware updates for affected players are being prepared and that the partner will announce when those firmware updates land. The communication indicated a staged approach in which software updates for Rekordbox are available now and player firmware updates will follow when ready.

AlphaTheta set out interim user precautions while fixes are prepared, including avoiding the use of USB or SD cards that contain sensitive files when operating a linked Pro DJ Link setup. The notice recommended that any player connected to a Wi-Fi network be placed on a password-protected network. The company presented these steps as interim measures to reduce exposure until player firmware updates are published. The notice added that for home use or small gigs the chances of someone gaining access to a Pro DJ Link network to view files are slim.