A high-severity out-of-bounds read vulnerability in the SpaceDot AcubeSAT OBC software allows unauthenticated attackers to cause a system Denial of Service.

The vulnerability exists in the CAN::Application::parsePerformFunctionMessage component, where improper handling of input data allows an unauthenticated attacker to trigger an out-of-bounds read via a crafted CAN message.

Successful exploitation of this vulnerability results in a Denial of Service, which poses a significant operational risk to satellite flight systems. Given the CVSS score of 7.1, this flaw is categorized as high severity because it can disrupt critical command and control functions, potentially leading to a loss of mission availability or control over the satellite hardware.

Immediate Action: Organizations utilizing the affected software should restrict access to the CAN bus interface to authorized systems only and monitor for anomalous message traffic.

Proactive Monitoring: Security teams should implement strict input validation on all incoming CAN messages and monitor system logs for crashes or unexpected restarts related to the OBC software.

Compensating Controls: If a patch is unavailable, isolating the affected hardware from external networks or unauthenticated message sources is the most effective temporary mitigation.

Public Exploit Available: No

The vulnerability presents a credible risk to the stability of the AcubeSAT OBC software, and immediate attention is required to ensure system resilience. Administrators should prioritize the implementation of input filtering and network segmentation to mitigate the risk of unauthorized message injection until a formal vendor patch is released.