VULNERABILITY INTELLIGENCE
CVE-2015-0932
CVSS score10 HIGH
EPSS probability5.55%
CISA KEVNot currently listed
Published2015-04-05
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
Primary references
- cret@cert.org — Exploit
- cret@cert.org — Patch, Vendor Advisory
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108