Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.
References
Link | Resource |
---|---|
http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ | Vendor Advisory |
http://www.securityfocus.com/bid/99899 | Third Party Advisory VDB Entry |
https://twitter.com/mkolsek/status/923988845783322625 | Third Party Advisory |
https://www.kb.cert.org/vuls/id/586501 | Third Party Advisory US Government Resource |
http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ | Vendor Advisory |
http://www.securityfocus.com/bid/99899 | Third Party Advisory VDB Entry |
https://twitter.com/mkolsek/status/923988845783322625 | Third Party Advisory |
https://www.kb.cert.org/vuls/id/586501 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:25
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/99899 - Third Party Advisory, VDB Entry | |
References | () https://twitter.com/mkolsek/status/923988845783322625 - Third Party Advisory | |
References | () https://www.kb.cert.org/vuls/id/586501 - Third Party Advisory, US Government Resource |
Information
Published : 2017-07-22 20:29
Updated : 2024-11-21 03:25
NVD link : CVE-2017-3222
Mitre link : CVE-2017-3222
CVE.ORG link : CVE-2017-3222
JSON object : View
Products Affected
inmarsat
- amosconnect
CWE
CWE-798
Use of Hard-coded Credentials