Inmarsat AmosConnect8 Mail Client Vulnerable to SQL Injection and Backdoor Account

ronjor · Jul 20, 2017

Original Release date: 20 Jul 2017 | Last revised: 20 Jul 2017

Overview
Inmarsat Solutions offers a shipboard email client service, AmosConnect 8 (AC8 ), which was designed to be utilized over satellite networks in a highly optimized manner. A third-party security research firm has identified two security vulnerabilities in the client software: On-board ship network access could provide visibility of user names and passwords configured on the client device. A backdoor account has been identified in the client that provides full system privileges. This vulnerability could be exploited remotely. An attacker with high skill would be able to exploit this vulnerability. AmosConnect 8 has been deemed end of life, and no longer supported. Inmarsat customers must contact Inmarsat Customer Service to obtain the replacement mail client software.
Click to expand...

itman · Oct 26, 2017

A popular satellite communications (SATCOM) system installed on ships across the world is affected by two serious security flaws — a hidden backdoor account with full system privileges access and an SQL injection in the login form.

These vulnerabilities affect the AmosConnect 8 designed and sold by Stratos Global, a company acquired in 2009 by mobile satellite services firm Inmarsat Group.

Flaws won't receive patches

The two vulnerabilities are part of a report released today by cyber-security and penetration testing firm IOActive, but they won't receive any patches because Stratos retired the AtmosConnect 8 product just months before, in June 2017, according to an end-of-life announcement on the company's site.
Click to expand...

https://www.bleepingcomputer.com/ne...popular-ship-satellite-communications-system/

ronjor · Oct 27, 2017

Inmarsat Disputes IOActive Reports of Critical Flaws in Ship SATCOM

Jai Vijayan 10/26/2017
Satellite communications provider says security firm's narrative about vulnerabilities in its AmosConnect 8 shipboard email service is overblown.
Click to expand...

Log in or Sign up

Inmarsat AmosConnect8 Mail Client Vulnerable to SQL Injection and Backdoor Account

ronjor Global Moderator

itman Registered Member

ronjor Global Moderator

Log in or Sign up

Inmarsat AmosConnect8 Mail Client Vulnerable to SQL Injection and Backdoor Account

ronjor Global Moderator

itman Registered Member

ronjor Global Moderator

Useful Searches