CVE-2026-13743: CW0057 Reaction Wheel 0 to before 5.0.20

Affected technology

CW0057 Reaction Wheel · 0 to before 5.0.20
CubeSpace

Description’s affected range: versions prior to 5.0.20

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Physical access · No privileges required · No user interaction required

What an attacker can do

An attacker with physical access to the product could upload arbitrary malicious firmware to the device without authentication. Vendor/CNA’s CVSS 4.0 assessment (base score 3.3/10) rates confidentiality impact as none; integrity and availability impact as high.