A critical stack overflow vulnerability in the SpaceDot AcubeSAT OBC software permits unauthenticated remote attackers to induce a system Denial of Service.

The vulnerability exists within the loadRawData function, which fails to properly handle input during the processing of ECSS TC messages. This flaw allows an unauthenticated, remote attacker to trigger a stack overflow and crash the affected service.

The successful exploitation of this vulnerability results in a complete Denial of Service for the affected satellite onboard computer system. Given the CVSS score of 7.5, this high severity flaw could lead to significant operational disruption, loss of mission control, and the inability to communicate with or manage the satellite hardware.

Immediate Action: Review the official SpaceDot repository for updates or patches addressing commit eaf90ec and apply them immediately. If no official patch is available, restrict network access to the affected interface to prevent untrusted traffic from reaching the vulnerable function.

Proactive Monitoring: Monitor system logs for unexpected crashes or service restarts associated with the loadRawData function. Analyze network traffic for malformed ECSS TC messages that deviate from established communication protocols.

Compensating Controls: Implement strict input validation or packet filtering at the network boundary to drop malformed ECSS TC messages before they reach the onboard computer software.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to the availability of satellite operations. Security teams must prioritize verifying the current version of the AcubeSAT OBC software and apply the necessary vendor patches as soon as they become available to prevent potential remote exploitation.