Inmarsat AmosConnect 8 VU#586501 Security Bypass and SQL Injection Vulnerabilities
BID:99899
Info
Inmarsat AmosConnect 8 VU#586501 Security Bypass and SQL Injection Vulnerabilities
| Bugtraq ID: | 99899 |
| Class: | Design Error |
| CVE: |
CVE-2017-3221 CVE-2017-3222 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 20 2017 12:00AM |
| Updated: | Jul 20 2017 12:00AM |
| Credit: | Cesar Cerrudo at IOActive Labs |
| Vulnerable: |
Inmarsat AmosConnect 8 8.4 Inmarsat AmosConnect 8 8.3.1 Inmarsat AmosConnect 8 8.3 Inmarsat AmosConnect 8 8.2.2 Inmarsat AmosConnect 8 8.2.1 Inmarsat AmosConnect 8 8.2 Inmarsat AmosConnect 8 8.0.2 Inmarsat AmosConnect 8 8.0.1 Inmarsat AmosConnect 8 8.4.0.1 Inmarsat AmosConnect 8 8.0 |
| Not Vulnerable: | |
Discussion
Inmarsat AmosConnect 8 VU#586501 Security Bypass and SQL Injection Vulnerabilities
Inmarsat AmosConnect 8 is prone to a security-bypass vulnerability and an sql-injection vulnerability.
An attacker can leverage these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary code, or gain access to the affected system.
Inmarsat AmosConnect 8 is prone to a security-bypass vulnerability and an sql-injection vulnerability.
An attacker can leverage these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary code, or gain access to the affected system.
Exploit / POC
Inmarsat AmosConnect 8 VU#586501 Security Bypass and SQL Injection Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Inmarsat AmosConnect 8 VU#586501 Security Bypass and SQL Injection Vulnerabilities
References:
References: