CVE-2025-67780

🗓️ 11 Dec 2025 23:05:44Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 27 Views🌐 WEB

Unauthenticated remote procedure call admin access on Starlink Dish; Referer bypass enables cross-origin access and tilt, rotation, elevation data leak.

Reporter	Title	Published	Views	Family All 10
githubexploit	Exploit for CVE-2025-67780	16 Dec 202510:21	–	githubexploit
attackerkb	CVE-2025-67780	11 Dec 202523:05	–	attackerkb
circl	CVE-2025-67780	12 Dec 202503:30	–	circl
cnnvd	SpaceX Starlink Dish 安全漏洞	11 Dec 202500:00	–	cnnvd
cvelist	CVE-2025-67780	11 Dec 202523:05	–	cvelist
euvd	EUVD-2025-202927	12 Dec 202500:30	–	euvd
nvd	CVE-2025-67780	11 Dec 202523:15	–	nvd
ptsecurity	PT-2025-50774	11 Dec 202500:00	–	ptsecurity
redhatcve	CVE-2025-67780	12 Dec 202523:07	–	redhatcve
vulnrichment	CVE-2025-67780	11 Dec 202523:05	–	vulnrichment

Vulners

Node

spacex starlink_dishRange2024.12.04.mr46620–21.08.24

[
  {
    "defaultStatus": "unknown",
    "product": "Starlink Dish",
    "vendor": "SpaceX",
    "versions": [
      {
        "lessThan": "21.08.24",
        "status": "affected",
        "version": "2024.12.04.mr46620",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
akawlabs	www.akawlabs.com/blog/starlink-grpc-execution

Parameter	Position	Path	Description	CWE
03 ca 3e 00	request body	192.168.100.1:9201	Unauthenticated HTTP POST to diagnostic port exploits gRPC command mapping to reboot, causing DoS.	CWE-306

09 Jul 2026 13:16Current

6Medium risk

Vulners AI Score6

CVSS 3.14.2

EPSS0.00153

SSVC

CWE-306