EUVD-2017-12343

Malware in sbrugna...

EUVD-2017-12342

Malware in sbrugna...

Two Critical Vulnerabilities Found In Inmarsat’s SATCOM Systems

UPDATE Researchers are warning of two critical vulnerabilities in global satellite telecommunications company Inmarsat’s SATCOM systems. The vulnerabilities impact thousands of customers running the newest version of its AmosConnect platform, typically found on maritime sea vessels, according to...

Task Manager Service Command Execution

The vulnerability of the AmosConnect email delivery system management service is related to the use of immutable, pre-installed system accounts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full administrative privileges and execute arbitrary commands on the...

AmosConnect 8 Security Bypass Vulnerability

AmosConnect 8 is a mail sending and receiving management system. The system supports sending and receiving mail, faxes and messages. A security bypass vulnerability exists in AmosConnect 8. It allows remote attackers to gain administrative privileges...

CVE-2017-3221

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

Hardcoded credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3221

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

Sql injection

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3221

The CVE-2017-3221 issue is a Blind SQL Injection in Inmarsat AmosConnect 8 login form. The vulnerability allows attackers on the same network to access user credentials (usernames and passwords) stored by AmosConnect 8, with the ThreatPost report noting the server stores usernames and passwords i...

CVE-2017-3222

CVE-2017-3222 relates to AmosConnect 8, where hard-coded credentials allow remote attackers to gain full administrative privileges and execute commands with SYSTEM privileges on the Windows host via AmosConnect Task Manager. The surrounding docs note an accompanying backdoor account and that Amos...

CVE-2017-3221

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

PT-2017-15711

Name of the Vulnerable Software and Affected Versions Inmarsat AmosConnect version 8 Description The issue concerns a blind SQL injection in the login form, allowing remote attackers to access user credentials, including username and password. This could potentially lead to unauthorized access to...

CVE-2017-3222: Use of Hard-coded Credentials

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

CVE-2017-3221: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords...

PT-2017-2834

Name of the Vulnerable Software and Affected Versions AmosConnect version 8 Description The issue is related to hard-coded credentials in the AmosConnect Task Manager, allowing remote attackers to gain full administrative privileges. This includes the ability to execute commands on the Microsoft...