EUVD-2026-65072
GHSA-fmcr-j4vv-2whw
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
UART is a physical serial interface requiring hardware proximity, making AV:P correct; the NVD-assigned AV:N directly contradicts the description's physical-proximity requirement.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
4DescriptionCVE.org
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service (DoS) via a crafted input.
AnalysisAI
Denial of service in SpaceDot AcubeSAT On-Board Computer (OBC) software at commit eaf90ec is triggered by a crafted input to the cobs_decode function, exploiting an integer handling flaw (CWE-400) over the UART serial interface. Physical proximity to the hardware is required, rendering the NVD-assigned CVSS vector (AV:N) inconsistent with the description's explicit 'physically-proximate' access requirement - a likely scoring error that significantly overstates remote risk. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires direct physical access to the UART serial port of the AcubeSAT OBC hardware - the attacker must be co-located with the device and able to connect a serial interface (e.g., USB-to-UART adapter) to the UART pins or header. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is substantially lower than the CVSS 7.5 base score implies. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with physical access to a satellite integration lab connects to the AcubeSAT OBC UART debug port, constructs a malformed COBS-encoded byte sequence designed to trigger the integer handling flaw in cobs_decode, and transmits it over the serial interface, causing the OBC software to crash or hang and resulting in a denial of service to the satellite's on-board computer. No public proof-of-concept exploit has been identified; physical hardware access is an absolute prerequisite. |
| Remediation | No vendor-released patch or fixed version has been identified at time of analysis; the only reference is a third-party GitHub issue rather than an official SpaceDot advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running SpaceDot AcubeSAT OBC software and document their physical security posture, particularly UART interface accessibility. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Remote code execution in the Exim mail transfer agent (versions before 4.99.3) built against certain GnuTLS configuratio
SQL injection in EasyAppointments <=1.5.1 allows unauthenticated attackers to extract and modify database contents via t
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
Privilege escalation via broken access control in Citrix Cloud (through 2025-11-10) lets a user holding only read-only p
go-wind-cms (GoWind) before 1.0.0 exposes all administrative APIs to any authenticated user because NewAuthorizer() retu
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Arbitrary kernel memory read/write in Realtek rtl819x Jungle SDK Wi-Fi driver allows local unprivileged attackers to acc
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today