CVE-2017-3221

CRITICAL

Inmarsat AmosConnect 8 - Blind SQL Injection via Login Form

Title source: llm
STIX 2.1

Description

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99899
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
https://www.kb.cert.org/vuls/id/586501

Scores

CVSS v3 9.8
EPSS 0.0354
EPSS Percentile 88.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (11)
Inmarsat/AmosConnect 8.0, 8.0.1, 8.0.2, 8.2.0, 8.2.1, 8.2.2, 8.3.0, 8.3.1, 8.4.0, 8.4.0.1
inmarsat/amosconnect_8 8.0
inmarsat/amosconnect_8 8.0.1
inmarsat/amosconnect_8 8.0.2
inmarsat/amosconnect_8 8.2.0
inmarsat/amosconnect_8 8.2.1
inmarsat/amosconnect_8 8.2.2
inmarsat/amosconnect_8 8.3.0
inmarsat/amosconnect_8 8.3.1
inmarsat/amosconnect_8 8.4.0
... and 1 more
Published Jul 22, 2017
Tracked Since Feb 18, 2026