{"containers": {"cna": {"affected": [{"product": "AmosConnect", "vendor": "Inmarsat", "versions": [{"status": "affected", "version": "8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1"}]}], "datePublic": "2017-07-22T00:00:00", "descriptions": [{"lang": "en", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-798", "description": "CWE-798", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2017-10-28T18:57:01", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/99899"}, {"tags": ["x_refsource_MISC"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "https://www.kb.cert.org/vuls/id/586501"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2017-3222", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "AmosConnect", "version": {"version_data": [{"version_value": "8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1"}]}}]}, "vendor_name": "Inmarsat"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-798"}]}]}, "references": {"reference_data": [{"name": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/", "refsource": "MISC", "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99899"}, {"name": "https://twitter.com/mkolsek/status/923988845783322625", "refsource": "MISC", "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "refsource": "CERT-VN", "url": "https://www.kb.cert.org/vuls/id/586501"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T14:16:28.507Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"name": "99899", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/99899"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"name": "VU#586501", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "https://www.kb.cert.org/vuls/id/586501"}]}]}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2017-3222", "datePublished": "2017-07-22T20:00:00", "dateReserved": "2016-12-05T00:00:00", "dateUpdated": "2024-08-05T14:16:28.507Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEFBF35E-464C-4D0A-994C-6E0D2BF2EEF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E4841016-AE8E-427E-88C6-8652E536E8AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "0C9D4054-A8F3-40FC-A847-7E3E99080310", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "64224E85-F3E8-4B45-B877-9EF3CB04FDD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EE5C8665-64A6-4DAF-A6AC-ABF12EAD4268", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "93FE4D18-037A-4DCD-97EF-0513B2B4BB74", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "F0C811BF-607D-4663-8406-9E67C66192FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "829663CA-7449-49D6-A063-BC52DFB49D1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "AE3754FB-1AD8-4EA4-81BE-FBC457F465D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:inmarsat:amosconnect:8.4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "72E82817-1484-4C5F-9F18-0FD9AEE74F0C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager."}, {"lang": "es", "value": "Las credenciales codificadas en AmosConnect 8, permiten a atacantes remotos alcanzar privilegios administrativos completos, incluida la capacidad de ejecutar comandos en la plataforma host de Microsoft Windows con privilegios SYSTEM mediante la violaci\u00f3n del Administrador de tareas de AmosConnect."}], "id": "CVE-2017-3222", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2017-07-22T20:29:00.250", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99899"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/586501"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99899"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://twitter.com/mkolsek/status/923988845783322625"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://www.kb.cert.org/vuls/id/586501"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "[email protected]", "type": "Primary"}]}

{}