Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT

The ad hoc addition to the otherwise tightly controlled White House information environment could create blind spots and security exposures while setting potentially dangerous precedent...

CVE-2023-52235: Reliance on Reverse DNS Resolution for a Security-Critical Action

SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF e.g., for a reboot via a DNS Rebinding attack...

PT-2024-14499

Name of the Vulnerable Software and Affected Versions SpaceX Starlink Wi-Fi router GEN 2 versions prior to 2023.53.0 SpaceX Starlink Dish versions prior to 07dd2798-ff15-4722-a9ee-de28928aed34 Description The issue allows for CSRF via a DNS Rebinding attack, which can be used for actions such as...

CVE-2023-49965: Improper Neutralization of Input During Web Page Generation

SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page...

PT-2023-9152

Name of the Vulnerable Software and Affected Versions SpaceX Starlink Wi-Fi router Gen 2 versions prior to 2023.48.0 Description The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack via the ssid and...