CVE-2017-3222

9.8 CRITICAL

Published: July 22, 2017 Modified: May 13, 2026

Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/

Source: cret@cert.org

Vendor Advisory

http://www.securityfocus.com/bid/99899

Source: cret@cert.org

Third Party Advisory VDB Entry

https://twitter.com/mkolsek/status/923988845783322625

Source: cret@cert.org

Third Party Advisory

https://www.kb.cert.org/vuls/id/586501

Source: cret@cert.org

Third Party Advisory US Government Resource

http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/99899

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry

https://twitter.com/mkolsek/status/923988845783322625

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.kb.cert.org/vuls/id/586501

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory US Government Resource

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

9.8 / 10.0

EPSS (Exploit Probability)

7.4%

94th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-798 CWE-798

Affected Vendors

inmarsat

Related CVEs