{"containers": {"cna": {"affected": [{"product": "AmosConnect", "vendor": "Inmarsat", "versions": [{"status": "affected", "version": "8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1"}]}], "datePublic": "2017-07-22T00:00:00", "descriptions": [{"lang": "en", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-798", "description": "CWE-798", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2017-10-28T18:57:01", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/99899"}, {"tags": ["x_refsource_MISC"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "https://www.kb.cert.org/vuls/id/586501"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@cert.org", "ID": "CVE-2017-3222", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "AmosConnect", "version": {"version_data": [{"version_value": "8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1"}]}}]}, "vendor_name": "Inmarsat"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-798"}]}]}, "references": {"reference_data": [{"name": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/", "refsource": "MISC", "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99899"}, {"name": "https://twitter.com/mkolsek/status/923988845783322625", "refsource": "MISC", "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "refsource": "CERT-VN", "url": "https://www.kb.cert.org/vuls/id/586501"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T14:16:28.507Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/99899"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "https://www.kb.cert.org/vuls/id/586501"}]}]}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2017-3222", "datePublished": "2017-07-22T20:00:00", "dateReserved": "2016-12-05T00:00:00", "dateUpdated": "2024-08-05T14:16:28.507Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEFBF35E-464C-4D0A-994C-6E0D2BF2EEF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E4841016-AE8E-427E-88C6-8652E536E8AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "0C9D4054-A8F3-40FC-A847-7E3E99080310", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "64224E85-F3E8-4B45-B877-9EF3CB04FDD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EE5C8665-64A6-4DAF-A6AC-ABF12EAD4268", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "93FE4D18-037A-4DCD-97EF-0513B2B4BB74", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "F0C811BF-607D-4663-8406-9E67C66192FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "829663CA-7449-49D6-A063-BC52DFB49D1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "AE3754FB-1AD8-4EA4-81BE-FBC457F465D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "72E82817-1484-4C5F-9F18-0FD9AEE74F0C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}, {"lang": "es", "value": "Las credenciales codificadas en AmosConnect 8, permiten a atacantes remotos alcanzar privilegios administrativos completos, incluida la capacidad de ejecutar comandos en la plataforma host de Microsoft Windows con privilegios SYSTEM mediante la violaci\u00f3n del Administrador de tareas de AmosConnect."}], "id": "CVE-2017-3222", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-07-22T20:29:00.250", "references": [{"source": "cret@cert.org", "tags": ["Vendor Advisory"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"source": "cret@cert.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99899"}, {"source": "cret@cert.org", "tags": ["Third Party Advisory"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"source": "cret@cert.org", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/586501"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99899"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/586501"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "cret@cert.org", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}