CVE-2017-3222

Critical

Published: 22/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges. Attackers can execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

Risk Assessment

The organization is exposed to serious threats as attackers can remotely take control of the system, potentially leading to data loss and security breaches.

Recommendation

It is recommended to remove hard-coded credentials and implement strong authentication mechanisms in AmosConnect 8 to minimize the risk of unauthorized access.

Original NVD description (English source)

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.