HIGH🇬🇧 English

CVE-2015-0932

CVSS 10.0v2.0pub. 2015-04-05upd. 2026-05-06

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Antlabs Inngate Ig 3.00 E

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3.01 E

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3.02 E

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3100

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3101

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3.10 E

    HW
    Antlabs
    wszystkie wersje

  • Antlabs Inngate Ig 3.10 G

    HW
    Antlabs
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2015-2849HIGH7.5ten sam produkt

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3....

CVE-2015-2850MEDIUM4.3ten sam produkt

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGat...