ESA SPACE-SHIELD
T2046

Compromise the satellite platform starting from a compromised payload

Description

An attacker can begin by compromising the payload of a satellite, exploiting vulnerabilities in its software or hardware. From there, the attacker can escalate their access to the satellite's main platform, potentially gaining control over critical systems, communications, and payload operations.

Mapped SPARTA techniques

2 techniques

  • IA-0006Compromise Hosted PayloadST0003
    addresses
    moderate

    T2046 'Compromise the satellite platform starting from a compromised payload' captures the payload-as-doorway-to-host dynamic IA-0006 describes; SPACE-SHIELD frames this as lateral-movement rather than initial-access, but the activity is the same.

  • LM-0001Hosted PayloadST0007
    addresses
    high

    T2046 'Compromise the satellite platform starting from a compromised payload' is the direct cross-framework counterpart of LM-0001 — both describe attackers pivoting from a payload foothold through the host-payload boundary to reach additional bus subsystems.

Cite as SafeMode Space, space-shield T2046.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.