NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Security researchers at Cycode have found vulnerabilities in NASA's AIT-GUI console that could allow unauthorized attackers to send commands to spacecraft. The flaws, which have a severity rating of 9.4, can be exploited by unauthenticated attackers to issue arbitrary commands. The vulnerabilities affect the AIT-GUI, a browser-based console used with the AMMOS Instrument Toolkit. The issue has been assigned a unique identifier, GHSA-p9r8-2q67-fp86, and is considered highly severe according to the CVSS v3.1 scoring system.