CVE-2017-3222

2017-07-2220:00:00

CWE-798

certcc

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.008

Percentile

81.2%

JSON

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

CNA Affected

[
  {
    "product": "AmosConnect",
    "vendor": "Inmarsat",
    "versions": [
      {
        "status": "affected",
        "version": "8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1"
      }
    ]
  }
]