CyberRota Analysis
AI-GeneratedThe default configuration of the NASA-AMMOS Asynchronous Network Management System exposes the amp-manager service's REST API on the host network, allowing unauthenticated access to critical command-dispatch endpoints. This vulnerability permits any network-accessible client to enumerate agents, issue arbitrary commands, and manipulate stored reports without authentication, posing a significant risk to systems managing space communications. Organizations utilizing the affected Docker implementations should prioritize remediation to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, e.g. ":8089/tcp") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access Manager) gateway that is otherwise the system's sole authentication boundary.