Is there a patch available for CVE-2026-13743?

Yes, a patch is available for CVE-2026-13743. Update the affected software to the latest version immediately.

CubeSpace CW0057 CVE-2026-13743

Q: What is the CVSS score of CVE-2026-13743?

CVE-2026-13743 has a CVSS 4.0 base score of 3.3 (Low). CVSS vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-41419 LOW

Improper Verification of Cryptographic Signature (CWE-347)

2026-07-02 icscert

GHSA-hmx6-cprg-h49v

Information Disclosure Jwt Attack Cw0057 Reaction Wheel

3.3

CVSS 4.0 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

3.3 LOW

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.1 MEDIUM

Physical access required (AV:P), no privileges or interaction needed once connected; integrity and availability fully compromised via firmware replacement, no confidentiality impact.

3.1 AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

4.0 AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 02, 2026 - 20:17 EUVD

Analysis Generated

Jul 02, 2026 - 19:31 vuln.today

DescriptionCVE.org

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.

AnalysisAI

Improper cryptographic signature verification in the CubeSpace CW0057 Reaction Wheel firmware (versions prior to 5.0.20) permits an attacker with physical access to flash arbitrary, unsigned firmware onto the device without any authentication. This affects a safety-critical spacecraft attitude control component used in CubeSat and small satellite missions, where unauthorized firmware replacement could cause mission-critical failures including attitude loss or uncontrolled spacecraft behavior. A proof-of-concept exploit exists (indicated by E:P in the CVSS 4.0 supplemental vector); no active exploitation has been confirmed by CISA KEV at time of analysis.

Technical ContextAI

The CubeSpace CW0057 is a reaction wheel - an inertial actuator used in small satellite and CubeSat platforms for attitude determination and control system (ADCS) functions. CWE-347 (Improper Verification of Cryptographic Signature) identifies the root cause: the firmware update mechanism fails to cryptographically validate the authenticity and integrity of uploaded firmware images before flashing them. The 'Jwt Attack' tag in the intelligence data suggests the signature scheme may leverage JSON Web Tokens (JWT) for firmware authentication, and the bypass likely exploits weak or absent signature validation logic (e.g., accepting unsigned tokens, algorithm confusion, or 'none' algorithm). The CPE string cpe:2.3:a:cubespace:cw0057_reaction_wheel:*:*:*:*:*:*:*:* confirms all firmware versions prior to 5.0.20 are in scope. This is an ICS/OT device reported by ICS-CERT via CISA advisory ICSA-26-183-02.

RemediationAI

The primary remediation is to update CW0057 firmware to version 5.0.20 or later, as confirmed by the vulnerability description. The CISA advisory ICSA-26-183-02 at https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-02 should be consulted for vendor-specific update procedures and any additional guidance from CubeSpace. As a compensating control where firmware update is not immediately possible, operators should enforce strict physical access controls to all CW0057 hardware during integration, test, and storage phases - specifically restricting who may connect to firmware update interfaces (USB, UART, or similar) and logging all such access events. Physical tamper-evident seals can provide detection capability for unauthorized access. Because the 'Jwt Attack' tag suggests the vulnerability may reside in JWT signature validation, disabling or restricting remote firmware update interfaces (if any exist alongside the physical interface) is advisable as an additional layer, though the primary attack vector here is confirmed physical. These physical controls do not remediate the underlying cryptographic flaw and should only serve as interim measures pending the firmware update.