The NASA-AMMOS ANMS reference implementation's default docker-compose.yml file publishes the amp-manager service's REST API directly to the host network interface on port 8089. This configuration bypasses the CAM gateway, which is intended as the sole authentication boundary for the system. Additionally, the service runs with elevated Linux capabilities (NET_ADMIN, NET_RAW, SYS_NICE), potentially allowing an attacker to perform privileged network operations. This setup constitutes a CWE-306 (Missing Authentication for Critical Function) vulnerability, enabling unauthenticated remote attackers to access and control critical system functions.

An attacker can access the amp-manager REST API without authentication due to the bypass of the CAM gateway. Given the elevated Linux capabilities assigned to the service, this can lead to full compromise of the system's confidentiality, integrity, and availability. The vulnerability is rated critical with a CVSS score of 9.8, reflecting the potential for complete system takeover without any user interaction or privileges.

No official fix or patch is currently available for this vulnerability. Users of the NASA-AMMOS ANMS reference implementation should avoid using the default docker-compose.yml configuration that exposes the amp-manager service directly to the host network. Instead, they should ensure that the amp-manager service is only accessible through the CAM gateway or implement additional authentication and network access controls to prevent unauthorized access. Monitor the vendor advisory for updates regarding official remediation.