Threats affecting pkg:github/AIT-DSN

A missing authentication vulnerability exists in the AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before version 2.2.2. This flaw allows unauthenticated network attackers to access seven unprotected API routes in the Space Link Extension (SLE) interface manager. Attackers can send direct HTTP requests without credentials to start or stop DSN communication sessions, retrieve telemetry frame data, and inject arbitrary frames into active spacecraft links. The vulnerability has a critical severity with a CVSS score of 9.3.