CVE-2023-52235

SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a reboot) via a DNS Rebinding attack.

Score

CVSS 3.1 8.8 High

Status

Deferred - cve@mitre.org

Published

2024-04-05

Last modified

2025-03-13

Weaknesses

CWE-350

Affected products

• Spacex Starlink Wi Fi Router Gen 2 (Spacex Starlink Wi Fi Router Gen 2)

References

• https://bugcrowd.com/disclosures/f529009b-90eb-4bf9-957d-6fe7ea890fa2/starlink-dishy-is-vulnerable-to-csrf-via-dns-rebi…