← Back

CVE-2017-3222

nvd nist
Published: Jul 22, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

Affected (10)

Inmarsat
1 product
Amosconnect
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Inmarsat
Amosconnect
Version 8.0.1
Amosconnect
Version 8.0.2
Amosconnect
Version 8.0
Amosconnect
Version 8.2.0
Amosconnect
Version 8.2.1
Amosconnect
Version 8.2.2
Amosconnect
Version 8.3.0
Amosconnect
Version 8.3.1
Amosconnect
Version 8.4.0.1
Amosconnect
Version 8.4.0

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (8)

Source: cret@cert.org
Vendor Advisory
Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: cret@cert.org
Third Party Advisory
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.