Vulnerabilities

CVSS

3.3 Low

Vector

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Risk score

26.4

Published

2026-07-02

Status

Published

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.

Weaknesses

CWE-347

Coverage 1

vulnerability

CubeSpace CW0057 Reaction Wheel

This CISA advisory details a vulnerability in CubeSpace CW0057 Reaction Wheels, specifically prior to version 5.0.20, which allows an attacker with physical access to upload malicious firmware. The vulnerability stems fr…

CISA Advisories · Jul 2, 2026 Low

CVE-2026-13743ZXfirmwarecryptographysecure boot

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-183-02