Cybersecurity – VisionSpace

Stack Buffer Overflow in ESA’s asn1scc

Advisories, Cybersecurity, SpaceOctober 2, 202639ViewsShareTwitter FacebookEmailLink

Written by: Ricardo Fradique (research) and Milenko Starcik (publication) ESA's ASN1SCC is an open-source ASN.1 compiler for embedded systems. It generates data types, encoders, and decoders from ASN.1 specifications, with support for encoding formats including XML Encoding Rules (XER). These generated components provide the interface between structured data definitions and the applications that process incoming…

Security Testing Is a Continuous Process, Not a One-Time Event

Advisories, Cybersecurity, Space, TechnologyJuly 17, 2026194ViewsShareTwitter FacebookEmailLink

Software products evolve constantly. New features are added, dependencies change, interfaces expand, and deployment environments become more complex. Each change can create new security assumptions - and new opportunities for those assumptions to fail. That is why vulnerability assessment should not be treated as a one-time activity performed shortly before a product ships. Effective security…

gr-satellites v5.8.0: Memory Corruption via Malformed Telemetry

Advisories, Cybersecurity, SpaceJanuary 27, 2026388ViewsShareTwitter FacebookEmailLink

gr-satellites is an open-source GNU Radio out-of-tree module designed for decoding telemetry from a wide range of satellite protocols. It is widely used by researchers, hobbyists, and professionals to process live RF signals and convert raw satellite transmissions into structured telemetry data. A recent security assessment of `gr-satellites v5.9.0` identified a security issue in the…

IDOR’s in NCIA ANET v3.4.1

Advisories, Cybersecurity, Defense, TechnologyJanuary 23, 2025742ViewsShareTwitter FacebookEmailLink

Written by: Andy Olchawa, Milenko Starcik Background The Advisor Network ("ANET") is a platform designed to monitor the connections between advisors and their advisees. It was initially developed by the Defense Digital Service to aid the USFOR-A and Resolute Support missions in supporting the Afghan government by providing a structure for training, advising, and assisting.…

Remote Code Execution via Man-in-the-Middle (and more) in NASA’s AIT-Core v2.5.2

Advisories, Cybersecurity, Space, TechnologyJanuary 23, 20251KViewsShareTwitter FacebookEmailLink

Written by: Andy Olchawa, Milenko Starcik The NASA - National Aeronautics and Space Administration AMMOS Instrument Toolkit (AIT) is a versatile, Python-based software suite designed to handle a wide range of tasks associated with Ground Data Systems (GDS), Electronic Ground Support Equipment (EGSE), commanding, telemetry uplink/downlink, and sequencing for both instrument and CubeSat missions. Building…

How to crash a Spacecraft – DoS through Vulnerability in NASA CryptoLib v1.3.0

Advisories, Cybersecurity, Space, TechnologyAugust 21, 20242KViewsShareTwitter FacebookEmailLink

CryptoLib, a software library developed by NASA, implements the CCSDS Space Data Link Security Protocol (SDLS) to secure communications between spacecraft running the Core Flight System (cFS) and their corresponding ground stations. The library is essential in safeguarding the integrity and confidentiality of data exchanged during space missions.