CVE-2015-0932

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cret@cert.org

Published

2015-04-05

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Inngate Ig 3.00 E (Antlabs)
• Inngate Ig 3.01 E (Antlabs)
• Inngate Ig 3.02 E (Antlabs)
• Inngate Ig 3.10 E (Antlabs)
• Inngate Ig 3.10 G (Antlabs)
• Inngate Ig 3100 (Antlabs)
• Inngate Ig 3101 (Antlabs)

References

• http://blog.cylance.com/spear-team-cve-2015-0932
• http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-c…
• http://www.kb.cert.org/vuls/id/930956
• http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/