Researchers Demonstrate How Ground Control Vulnerabilities Could Affect Satellites
· 39:01 · Watch on YouTube ↗
Summary
Researchers demonstrate how patched mission control vulnerabilities could expose configuration files or let a malicious display script send commands to a simulated spacecraft.
Key points
- The researchers said they worked with the vendor to patch the demonstrated vulnerabilities, though older versions remain affected.
- A path traversal flaw could let a user with storage access read configuration files, potentially revealing administrator credentials and mission details.
- In a separate simulated scenario, a malicious display script exploited cross-site scripting to send a command through an operator’s browser, moving a simulated spacecraft to a higher orbit.
- The demonstration relied on an operator opening the crafted file; the speaker said the resulting command could be visible in command history and telemetry.
- A speaker described the attack on satellite modems during Russia’s invasion of Ukraine as a ground-network compromise, with effects extending to Germany.
- The discussion also covered SDLS, a security layer used to protect spacecraft control communications.
Article Details
- Topics
- [01:21] Ground-network compromise and satellite modem disruption in Ukraine
- [06:28] Consequences of satellite and GPS disruption
- [08:15] Ground infrastructure as a spacecraft attack surface
- [09:28] Safety and security trade-offs in spacecraft engineering
- [18:08] Satellite cybersecurity training and challenges
- [19:56] Patched mission control vulnerabilities and spacecraft simulation
- [22:52] Path traversal and access to mission configuration
- [31:24] Cross-site scripting demonstration against a simulated spacecraft
- SDLS protection for spacecraft control communications