PT-2024-14499
CVE-2023-52235
·
Published
2024-04-05
·
Updated
2025-03-13
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SpaceX Starlink Wi-Fi router GEN 2 versions prior to 2023.53.0
SpaceX Starlink Dish versions prior to 07dd2798-ff15-4722-a9ee-de28928aed34
Description
The issue allows for CSRF via a DNS Rebinding attack, which can be used for actions such as rebooting the device.
Recommendations
For SpaceX Starlink Wi-Fi router GEN 2 versions prior to 2023.53.0, update to version 2023.53.0 or later.
For SpaceX Starlink Dish versions prior to 07dd2798-ff15-4722-a9ee-de28928aed34, update to version 07dd2798-ff15-4722-a9ee-de28928aed34 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾