Technical impact
A stack-based buffer overflow exists in the cmd_edl function of OreSat Firmware v1.0. The flaw is triggered when the fw_flash command is processed: the <filename> parameter is copied into a 64-byte stack buffer via memcpy without length validation, causing a buffer overflow. An attacker who can reach the UART3 serial interface can send an oversized filename and potentially execute arbitrary code on the device, leading to full system compromise. The vulnerability is a classic stack overflow that can be leveraged to overwrite return pointers and redirect program flow.
Affected Systems
OreSat Firmware version 1.0 is affected. No other vendors or product versions are listed in the current CNA data.
Risk and Exploitability
The exploit requires physical access to the UART3 interface, which limits the attack surface to personnel with direct hardware access. Despite this requirement, the overflow permits arbitrary code execution, making the risk severity low. The CVSS score of 4.6 indicates low severity, and the EPSS score of < 1% suggests that exploitation is unlikely. The vulnerability is not listed in the CISA KEV catalog. No official patch or workaround is listed at this time, so the risk remains significant for any device exposing UART3 to untrusted users.
