Vulnerability Details CVE-2015-0932
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.5%
CVSS Severity
CVSS v2 Score 10.0
References
- http://blog.cylance.com/spear-team-cve-2015-0932
- http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
- http://www.kb.cert.org/vuls/id/930956
- http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/
- http://blog.cylance.com/spear-team-cve-2015-0932
- http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
- http://www.kb.cert.org/vuls/id/930956
- http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/
Products affected by CVE-2015-0932
-
cpe:2.3:h:antlabs:inngate_ig_3.00_e:-
-
cpe:2.3:h:antlabs:inngate_ig_3.01_e:-
-
cpe:2.3:h:antlabs:inngate_ig_3.02_e:-
-
cpe:2.3:h:antlabs:inngate_ig_3.10_e:-
-
cpe:2.3:h:antlabs:inngate_ig_3.10_g:-
-
cpe:2.3:h:antlabs:inngate_ig_3100:-
-
cpe:2.3:h:antlabs:inngate_ig_3101:-