VulnSocial

CVE-2025-67780

LOWCVSS 4.2 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation, and elevation data via gRPC can make it easier to infer the geographical location of the dish. NOTE: this is disputed by the Supplier because unauthenticated LAN gRPC is intended behavior for certain mobile app integration, and because the cross-origin policy is correctly enforced for gRPC-Web (port 9201), i.e., it is not a valid vulnerability report.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-07: 111-07
Referenced assets1 URL
By indicator
Full discourse1 post
  • EvilData@EvilData

    SpaceX's consumer hardware has a small CVE footprint, and one is genuinely open. All are Starlink : Open / unfixed: • CVE-2026-19918 — Starlink Router Gen 3 (firmware 2025.11.14.mr64708.3), get_status on the gRPC management interface has improper access controls. LAN-only, CVSS 6.3 Medium, exploit is public (published via http://ararasat.com), and per the MITRE record "the vendor was contacted early about this disclosure but did not respond in any way." No fixed firmware listed. Published Aug 2026 — still standing. Fixed or disputed: • CVE-2025-67780 ("MARMALADE 2") — Starlink Dish, unauthenticated LAN gRPC lets admin actions through and leaks dish orientation (location inference). CVSS 4.2 — and SpaceX disputes it, saying unauthenticated LAN gRPC is intended behavior for the mobile app. • CVE-2023-49965 — Gen 2 router XSS via SSID/password fields on the setup page; fixed in firmware 2023.48.0. • CVE-2023-52235 — Gen 2 router + dish CSRF via DNS rebinding (could force a reboot); fixed in router firmware 2023.53.0.

    0000090
    61 followersView on X

Explore more

Back to dashboard