Full Report
Image by Copilot AI – For illustration only, not representative of a plan or proposal. What’s new: A report from Norway’s defense establishment research arm, FFI, that the country is highly vulnerable to loss of GNSS (we are shocked, SHOCKED!) A report from NRK that the Norwegian government is budgeting around $10M USD for a sovereign clock capability. Why it’s important: Resilient PNT is essential for every nation’s defense and economy. Disruptions can be devastating. Norway is in Russia’s neighborhood. Russia jams and spoofs Norway’s northern region, Finnmark, regularly. Russia could easily jam GNSS across all of Scandinavia from space. What else to know: Norway’s Ministry of Trade, Industry, and Fisheries issued a report on the impacts of losing GNSS earlier this year. Two Norwegian government agencies proposed a national clock network in January of this year. Southern Norway will should be able to use the UK’s eLoran network for […]
Analysis Summary
# Vulnerability: Critical GNSS Signal Fragility (Jamming and Spoofing)
## CVE Details
- **CVE ID:** N/A (Architectural/Protocol Weakness in Satellite Navigation)
- **CVSS Score:** 9.1 (CRITICAL) - *Note: This is an estimated environmental score based on potential impact to national critical infrastructure.*
- **CWE:** CWE-290: Authentication Bypass by Spoofing; CWE-406: Insufficient Control of Network Message Volume (Jamming/DoS)
## Affected Systems
- **Products:** Global Navigation Satellite Systems (GNSS) including GPS and Galileo.
- **Versions:** All current non-encrypted civilian signals.
- **Configurations:** Systems relying on GNSS for Positioning, Navigation, and Timing (PNT). Specifically affects:
- Emergency service localization and resource management.
- Telecommunications synchronization.
- Power grid distribution timing.
- Financial payment systems.
- Transport and food distribution logistics.
## Vulnerability Description
GNSS signals are characterized by low signal strength upon reaching Earth, making them "weak and highly vulnerable" to electromagnetic interference.
1. **Jamming:** A Denial of Service (DoS) attack where high-power radio frequency noise drowns out satellite signals, causing a total loss of PNT data.
2. **Spoofing:** A more sophisticated attack where false signals are transmitted to a receiver. This tricks the system into calculating incorrect positioning or timing data. This is assessed as more dangerous than jamming because it is harder to detect and can lead to immediate operational disruption without the user's awareness.
## Exploitation
- **Status:** Exploited in the wild (Active jamming and spoofing reported in Norway's Finnmark region and Southern California).
- **Complexity:** Low (Jamming) to Medium (Spoofing).
- **Attack Vector:** Physical / Adjacent (Radio Frequency broadcast).
- **Note:** Capabilities exist to jam GNSS across large geographic regions (e.g., all of Scandinavia) from space-based platforms.
## Impact
- **Confidentiality:** None
- **Integrity:** **High** (Spoofing results in incorrect location/time data which can cause physical accidents or system desynchronization).
- **Availability:** **High** (Jamming results in complete loss of service for critical infrastructure).
## Remediation
### Patches
- **None:** The vulnerability is inherent to the open broadcast nature of civilian GNSS signals.
- **Sovereign Clock:** The Norwegian government is budgeting ~$10M USD (94 million NOK) to build a national "super clock" network to provide traceable, precise time independent of satellites.
### Workarounds
- **Alternative PNT:** Implementation of terrestrial broadcast systems like **eLoran** (enhanced Long Range Navigation).
- **Redundancy:** Utilization of the UK’s eLoran network (effective for Southern Norway).
- **Inertial Navigation:** Use of internal sensors to bridge short-term GNSS outages.
## Detection
- **Indicators of Compromise:** Discrepancies between GNSS data and secondary sensors (IMUs); sudden "jumps" in geographic coordinates; unexpected loss of signal lock in clear-sky conditions.
- **Detection Methods:** FFI recommends national robustness standards and ground-based monitoring to identify spoofing attempts that deviate from legitimate satellite signals.
## References
- Norwegian Defence Research Establishment (FFI) Advisory: hxxps[:]//www[.]ffi[.]no/aktuelt/nyheter/nar-satellittnavigasjonen-svikter-blir-totalforsvaret-sarbart
- Resilient PNT Foundation: hxxps[:]//rntfnd[.]org/2026/09/24/norway-pnt-a-warning-and-a-sovereign-clock-ffi-and-nrk/
- NRK News Report: hxxps[:]//www[.]nrk[.]no/nordland/vil-bruke-nesten-hundre-millionar-pa-nasjonal-_superklokke_-1[.]18032700