GNSS message fields exceed the specification limits defined in the ICD (e.g., IS-GPS-200), which could imply spoofing or malformed packet injection. Can be signal malicious interference, malformed packet injection, or hardware anomaly. Requires upstream logic or telemetry processing to evaluate field ranges (e.g., based on IS-GPS-200).
| ID | Name | Description | |
| EX-0014 | Spoofing | Threat actors may attempt to spoof the various sensor and controller data that is depended upon by various subsystems within the victim spacecraft. Subsystems rely on this data to perform automated tasks, process gather data, and return important information to the ground controllers. By spoofing this information, threat actors could trigger automated tasks to fire when they are not needed to, potentially causing the spacecraft to behave erratically. Further, the data could be processed erroneously, causing ground controllers to receive incorrect telemetry or scientific data, threatening the spacecraft's reliability and integrity. | |
| EX-0014.04 | Position, Navigation, and Timing (PNT) | Threat actors may attempt to spoof Global Navigation Satellite Systems (GNSS) signals (i.e. GPS, Galileo, etc.) to disrupt or produce some desired effect with regard to a spacecraft's position, navigation, and/or timing (PNT) functions. | |