LOW CWE-347
CVE-2026-13743
Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel
CubeSpace·CW0057 Reaction Wheel
3.3/ 10
CVSS 4.0
Low severity
0.16%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 6% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 2, 2026
- Updated
- Jul 2, 2026
- First covered
- Jul 3, 2026
- Latest story
- 4 months ago
Summary
CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.
CWE-347Improper verification of cryptographic signature
Attack profile
Attack vectorPhysical
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionNone
ConfidentialityNone
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:PAffected products
- CubeSpace CW0057 Reaction Wheelbefore 5.0.20