Back to feed
EUVD-2017-12343 · Published Jul 22, 2017
Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.
Technologies
Inmarsat Amosconnect
Weaknesses
CWE-798
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.010.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Persistence Privilege Escalation Stealth Credential Access
References
Potentially impacted assets
See if this affects your attack surface
