NASA Ground Control Software Flaw Enables Unauthenticated Commands

Critical flaws in NASA's AIT-GUI ground control software let unauthenticated attackers send spacecraft commands and execute scripts.

NASA's AIT-GUI ground control software contains critical flaws that expose spacecraft command and script execution to unauthenticated attackers. Anyone able to reach the ground control interface could send unauthorized commands without valid credentials. The report does not indicate that the flaws have been exploited in the wild.

• AIT-GUI ground control software permits unauthenticated command and script execution
• Flaws could expose spacecraft operations if ground systems are network-reachable
• No confirmed exploitation reported at time of disclosure