Attack Chain

1. Attacker performs network reconnaissance to identify reachable instances of the AIT GUI.
2. Attacker initiates an unauthenticated connection request to the AIT web interface.
3. Attacker triggers the vulnerable Sessions.create() method without providing valid credentials.
4. The application generates and returns a valid session token due to missing validation logic.
5. Attacker utilizes the assigned session token to access privileged application endpoints.
6. Attacker calls the handle_cmd() function with malicious command parameters.
7. The application forwards the injected commands directly to the command bus.
8. Unauthorized commands are executed by the target system or downstream spacecraft hardware.

Impact

Successful exploitation allows unauthenticated remote attackers to gain full command-line control over the AIT command bus. This permits unauthorized execution of arbitrary spacecraft commands, potentially leading to mission degradation, loss of control over satellite instruments, or permanent hardware damage. Any organization utilizing versions of AIT GUI earlier than 2.5.1 in network-exposed environments is at immediate risk.

Recommendation

1. Upgrade to AIT GUI version 2.5.1 or later immediately to patch the missing authentication logic in Sessions.create().
2. Restrict network access to the AIT GUI interface to trusted management networks only, preventing exposure to untrusted segments.
3. Audit web server and application logs for anomalous POST requests to the session creation endpoints that do not correspond to known valid login attempts.