Dashboard / CVE-2026-13743

CVE-2026-13743

LOW
INFO Priority: 0.01 BB Relevance: 42/100
Published: 2026-07-02 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: X
AT: None
VC: None
VI: High
VA: High

Description

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

42 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v4.0
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.16%
Raw Score 0.001620
Percentile 5.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00162
2026-10-28
0.00162

Intelligence Sources

nvd ref →

External Links