As cited
Copy frozen at (site build).
vulnerabilities
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Researchers at Cycode disclosed a vulnerability chain (CVSS 9.4) in AIT-GUI, NASA/JPL's browser-based operator console for the AMMOS Instrument Toolkit, that permits unauthenticated attackers to send arbitrary commands to spacecraft and instrument command systems. The flaw affects the open-source software used for mission operations.
Why it matters: Space agencies and organizations operating JPL's AMMOS toolkit face immediate risk of unauthorized spacecraft command injection; practitioners should assess exposure and apply patches or network controls to restrict access to AIT-GUI immediately.
- Source published
- First seen by Cybersecurity Tracker