Vulns to End Your Space Mission
Demonstrates proof-of-concept exploits across ground control software and onboard satellite components that grant unauthorized spacecraft control.
Summary
Expanding Attack Surfaces in Space Missions
Modern space missions integrate specialized hardware and software components communicating across custom ground-to-space protocols. Vulnerabilities anywhere in this chain can result in total mission loss.
Vulnerability Analysis of Ground Control Segments
Researchers identified critical flaws across ground station control software, telemetry servers, and antenna controllers, enabling unauthenticated remote command injection into satellite uplinks.
Exploiting Onboard Spacecraft Firmware
Inspecting onboard spacecraft software revealed memory corruption bugs and unauthenticated debugging interfaces in flight computers. Proof-of-concept exploits demonstrated the ability to hijack attitude control and disrupt satellite subsystems.
Hardening Guidelines for Aerospace Missions
Securing space infrastructure requires end-to-end cryptographic command authentication, memory-safe flight software architectures, and rigorous penetration testing before launch.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.
Creator Stage·25 min
O. Gianatiempo · G. Aznarez
Discloses two unauthenticated remote code execution vulnerabilities in Draytek routers (CVE-2024-51138 and CVE-2024-51139) that enable full edge device takeovers.


