You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
gnss security
About this tag
The gnss security tag on WindowsForum.com covers vulnerabilities and advisories related to Global Navigation Satellite System (GNSS) receivers, with a focus on critical infrastructure. Recent discussions highlight a high-severity authentication flaw in the Carlson Software VASCO-B GNSS Receiver, tracked as CVE-2026-3893, which carries a CVSS score of 9.4. This CWE-306 missing authentication issue could allow remote attackers to alter device configuration or disrupt operations. CISA has urged operators to update to version 1.4.0 or later. The tag content emphasizes the importance of patching GNSS devices to prevent real-world disruption in critical infrastructure environments.
Critical infrastructure operators are being urged to patch Carlson Software’s VASCO-B GNSS Receiver after CISA published a new ICS advisory describing a high-severity authentication flaw that could let a remote attacker change device configuration or interfere with operation. The advisory says...
The Carlson Software VASCO-B GNSS Receiver has landed in the spotlight because CISA says a remotely reachable authentication flaw could let an attacker alter critical functions or disrupt operation. The affected range is VASCO-B GNSS Receiver versions before 1.4.0, tracked as CVE-2026-3893, and...