NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Brief
Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus.
The chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9. 4 on the CVSS v3. 1 scoring system, impacts AIT-GUI