What the vulnerability does

01Description

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager.

Key dates

02Disclosure timeline

July 22, 2017 CVE published
August 5, 2024 Record updated