The vulnerability arises from the default deployment of NASA-AMMOS ANMS where the amp-manager REST API is exposed directly on the host network interface (port 8089) with elevated Linux capabilities (NET_ADMIN, NET_RAW, SYS_NICE). The REST server, implemented with CivetWeb in the JHUAPL/dtnma-tools repository, has authentication disabled (enable_auth_domain_check set to "no") and registers all routes with a null authentication callback. This allows any network-reachable client to enumerate registered DTNMA agents, submit EXECSET-encoded command sets to them, and clear stored reports without any authentication. The affected components are reference implementations and testbeds, not flight software onboard spacecraft.

An unauthenticated remote attacker can fully control the amp-manager REST API, including enumerating agents, sending arbitrary commands to DTNMA agents, and clearing stored reports. This leads to complete compromise of the network management system's integrity, confidentiality, and availability. Given the critical CVSS score of 9.8, the impact includes potential full system control and disruption of network management operations for simulated or real spacecraft/ground nodes in the affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid exposing the amp-manager REST API directly to untrusted networks. Restrict network access to the service, enable authentication mechanisms if configurable, and do not deploy the default docker-compose.yml configuration in production environments. Monitor vendor channels for updates and apply official patches once released.