CISPA researchers disclose GomSpace NanoCom AX100 hijack flaw

Researchers at Nullcon Berlin disclosed that off-the-shelf radios used in numerous commercial satellites can be permanently hijacked to compromise the entire spacecraft. Ulysse Planta of the CISPA research centre identified flaws in the Danish-made GomSpace NanoCom AX100 radio, estimating that at least 28 of 64 active missions using the hardware are plausibly vulnerable. The exploit chain allows attackers to bypass login credentials, gain permanent control of the radio, and pivot across the satellite's internal bus. Open article →