Skip to content
The Nexus
DossierENTITY

CVSS v3.1

Coverage of CVSS v3.1 in the Nexus archive.

Earliest in view: Aug 20 · 11:05 UTCMost recent: Aug 20 · 11:05 UTC
Co-mentioned in this coverage
Cycodeorganization1AIT-GUItopic1NASAorganization1JPLorganization1AMMOS Instrument Toolkittopic1GHSA-p9r8-2q67-fp86topic1
Recent coverage
  • SECURITYAug 20 · 11:05 UTCTHE HACKER NEWS
    NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

    Security researchers at Cycode disclosed a chain of flaws in AIT-GUI, the operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. These flaws allow an unauthenticated attacker to issue arbitrary commands to the software’s spacecraft and instrument command bus. The vulnerability was tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on CVSS v3.1.

CVSS v3.1 · Dossier · The Nexus