CVE-2017-3222

KRITISCH 9.8CVE-2017-3222 · Published 22/07/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-3222 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in amosconnect (inmarsat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 7.4%, höher als bei 94.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
amosconnect inmarsat	`= 8.0= 8.0.1= 8.0.2= 8.2.0= 8.2.1= 8.2.2= 8.3.0= 8.3.1= 8.4.0= 8.4.0.1`	No fix yet

Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

References

inmarsat.com/news/inmarsat-response-to-ioactive-claims · Vendor Advisory
securityfocus.com/bid/99899 · Third Party Advisory
twitter.com/mkolsek/status/923988845783322625 · Third Party Advisory
kb.cert.org/vuls/id/586501 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free