Dishing Out DoS: How to Disable and Secure the Starlink User Terminal

TL;DR

This paper investigates vulnerabilities in Starlink satellite user terminals, revealing a denial of service attack through fuzzing, and discusses security lessons applicable to satellite communication devices.

Contribution

It uncovers a novel DoS vulnerability in Starlink user terminals and analyzes its implications for satellite network security.

Findings

Discovered a DoS attack vector via fuzzing on Starlink terminals.

Analyzed attack impact in different threat scenarios.

Provided security recommendations for satellite user terminals.

Abstract

Satellite user terminals are a promising target for adversaries seeking to target satellite communication networks. Despite this, many protections commonly found in terrestrial routers are not present in some user terminals. As a case study we audit the attack surface presented by the Starlink router's admin interface, using fuzzing to uncover a denial of service attack on the Starlink user terminal. We explore the attack's impact, particularly in the cases of drive-by attackers, and attackers that are able to maintain a continuous presence on the network. Finally, we discuss wider implications, looking at lessons learned in terrestrial router security, and how to properly implement them in this new context.