PT-2025-50774 · Spacex · Starlink Dish+1

Published 2025-12-11 · Updated 2025-12-22 · CVE-2025-67780

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions SpaceX Starlink Dish versions 2024.12.04.mr46620

Description SpaceX Starlink Dish devices allow administrative actions via unauthenticated LAN gRPC requests, referred to as MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. Access to tilt, rotation, and elevation data via the /grpc API endpoint can potentially reveal the geographical location of the dish.

Recommendations For versions 2024.12.04.mr46620, restrict access to the LAN gRPC interface. Ensure the Referer header is properly validated in all gRPC requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-67780

Affected Products

Mini1 Prod2

Starlink Dish

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-67780 · Security Note
• https://twitter.com/TheExploitLab/status/2001126587706814729 · Twitter Post
• https://t.me/CVEtracker/39553 · Telegram Post
• https://twitter.com/SystemTek_UK/status/1999595689098019115 · Twitter Post
• https://akawlabs.com/blog/starlink-grpc-execution · Note
• https://t.me/cveNotify/145529 · Telegram Post
• https://twitter.com/KhazAkar/status/2003016112251031856 · Twitter Post