Real Exploits, Testbed Validation, Policy Gaps in Maritime Connectivity
Presents vulnerability analysis and web interface exploits (CVE-2023-44852 to CVE-2023-44857) targeting maritime VSAT antenna control units and testbed validations.
Summary
Vulnerabilities in Maritime Satellite Comms
Very Small Aperture Terminal (VSAT) satellite systems provide critical internet and telemetry links for maritime vessels and offshore platforms. Despite their vital role in vessel operations, VSAT modems and controllers frequently contain unpatched security vulnerabilities.
Re-Hosting and Analyzing VSAT Firmware
By extracting and re-hosting firmware from widely deployed antenna control units (ACUs), researchers identified multiple critical vulnerabilities across web management interfaces, cataloged as CVE-2023-44852 through CVE-2023-44857.
Remote Exploitation and Vessel Testbed Validation
Exploiting these ACU web interface flaws enables unauthenticated remote code execution and full modem takeover. Testing within experimental maritime testbeds demonstrated how attackers could disable vessel communications or manipulate antenna positioning.
Policy Gaps and Recommendations for Maritime Defense
Securing maritime satellite connectivity requires updating international maritime cybersecurity standards, enforcing secure firmware baselines, and implementing network segmentation between satellite modems and shipboard operational controls.
Related talks
Main Stage·40 min
Vincent Lenders · Johannes Willbold · Robin Bisping
Software-defined radio signal injection attacks against VSAT satellite modems to deliver rogue firmware and obtain root shell access.
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.