## 3 Materials and Methods
### Vulnerability and Threat Analysis
#### 3.3.2 Protocol Vulnerabilities  
Table 3 summarizes the security vulnerabilities of the protocols used in satellite network threat modeling, and Table 4 outlines the key communication paths that may be affected by these vulnerabilities. Based on this, the key vulnerabilities and communication paths of each protocol are analyzed as follows: The TCP/IP vulnerability (\(pv_{1}\)), CVE-2024-47659, is a vulnerability in which improperly labeled packets during the connection process allow unauthorized nodes to modify data transmitted between other nodes. The CCSDS vulnerability (\(pv_{2}\)), CVE-2019-11815, is a use-after-free vulnerability caused by memory management errors, and it can compromise system integrity or lead to data loss. The MIOTY vulnerability (\(pv_{3}\)), CVE-2020-11901, is a memory management vulnerability that can make a system vulnerable to _denial-of-service (DoS) attacks_. The NMEA vulnerability (\(pv_{4}\)), CVE-2018-17174, is a vulnerability that exposes GNSS receivers to _DoS attacks_ through maliciously crafted data.  
The CVSS base scores (CVSS BSs) and impact values for each vulnerability were obtained from publicly available records in the National Vulnerability Database (NVD) and official CVE documentation. The CVSS scores follow the standard CVSS v3.1 scoring system, which assesses vulnerabilities based on their exploitability, impact on system security, and potential risk to affected components. The impact values correspond to the CVSS impact  
\begin{table}
\begin{tabular}{c c c} \hline \hline
**ID** & **Protocol** & **Connection Path** \\ \hline \multirow{2}{*}{\(pv_{1}\)} & TCP/IP & \(FW\to RT\) \\  & & \(RT\leftrightarrow GCS\), \(GW_{1}\), \(GW_{2}\) \\ \hline \multirow{2}{*}{\(pv_{2}\)} & CCSDS & \(GCS\leftrightarrow MEO\), \(LEO\) \\  & & \(GW_{1}\leftrightarrow LEO\) \\  & & \(GW\geq^{\leftarrow}MEO\), \(LEO\) \\ \hline \multirow{2}{*}{\(pv_{3}\)} & MIOTY & \(GW_{1}\leftrightarrow UAV\), \(IoT\) \\  & & \(GW_{2}\leftrightarrow IoT\) \\ \hline \multirow{2}{*}{\(pv_{4}\)} & NMEA & \(MEO\to GNSS\)1  \\ \hline \hline \end{tabular}
\end{table}
Table 4: Protocol connection paths in the satellite network.  
\begin{table}
\begin{tabular}{c c c c c} \hline \hline
**ID** & **Host** & **CVE ID** & **CVSS BS** & **Impact** \\ \hline \multirow{2}{*}{\(pv_{1}\)} & _FW_ & CVE-2022-34918 & 7.8 & 5.9 \\  & _RT_ & CVE-2023-28432 & 7.5 & 3.6 \\  & _GCS_ & CVE-2023-2319 & 9.8 & 5.9 \\  & _GW\({}_{1}\)_ & CVE-2023-32233 & 7.8 & 5.9 \\  & _GW\({}_{2}\)_ & CVE-2022-40684 & 9.8 & 6.0 \\  & _MEO_ & CVE-2023-38346 & 7.5 & 6.2 \\  & _LEO_ & CVE-2022-23937 & 7.5 & 6.3 \\  & _GNSS_ & CVE-2023-2203 & 8.8 & 5.9 \\  & _IoT_ & CVE-2024-47181 & 7.5 & 6.5 \\  & _UAV_ & CVE-2023-46256 & 9.8 & 5.9 \\ \hline \hline \end{tabular}
\end{table}
Table 2: Vulnerabilities in satellite network hosts.  
\begin{table}
\begin{tabular}{c c c c c} \hline \hline
**ID** & **Protocol** & **CVE ID** & **CVSS BS** & **Impact** \\ \hline \multirow{2}{*}{\(pv_{1}\)} & _TCP/IP_ & CVE-2024-47659 & 8.8 & 5.9 \\  & _CCSDS_ & CVE-2019-11815 & 7.5 & 3.6 \\  & _MIOTY_ & CVE-2020-11901 & 9.0 & 6.0 \\  & _NMEA_ & CVE-2018-17174 & 9.8 & 5.9 \\ \hline \hline \end{tabular}
\end{table}
Table 3: Protocol vulnerabilities in the satellite network.  
subscore, reflecting the severity of each vulnerability in terms of confidentiality, integrity, and availability.