CVE-2017-3222

Severity CVSS v4.0:
Pending analysis
Type:
CWE-798 Use of Hard-coded Credentials
Publication date:
22/07/2017
Last modified:
20/04/2025

Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:inmarsat:amosconnect:8.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.2.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.3.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.4.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect:8.4.0.1:*:*:*:*:*:*:*