ZeroHour

CVE-2017-3222

CVSS 3.1
9.8 critical
EPSS
7%p94
Published
()
Modified
Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

Vendors
inmarsat
Products
amosconnect
Weakness
CWE-798
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news