CVE-2015-0932

2015-04-0501:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2015-0932

antlabs

inngate

firmware

unauthorized access

rsync

nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.023 Low

EPSS

Percentile

89.6%

JSON

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

CPENameOperatorVersion
antlabs:inngate_ig_3.10_gantlabs inngate ig 3.10 geq*
antlabs:inngate_ig_3.10_eantlabs inngate ig 3.10 eeq*
antlabs:inngate_ig_3.00_eantlabs inngate ig 3.00 eeq*
antlabs:inngate_ig_3.01_eantlabs inngate ig 3.01 eeq*
antlabs:inngate_ig_3100antlabs inngate ig 3100eq*
antlabs:inngate_ig_3101antlabs inngate ig 3101eq*
antlabs:inngate_ig_3.02_eantlabs inngate ig 3.02 eeq*

CPE	Name	Operator	Version
antlabs:inngate_ig_3.10_g	antlabs inngate ig 3.10 g	eq	*
antlabs:inngate_ig_3.10_e	antlabs inngate ig 3.10 e	eq	*
antlabs:inngate_ig_3.00_e	antlabs inngate ig 3.00 e	eq	*
antlabs:inngate_ig_3.01_e	antlabs inngate ig 3.01 e	eq	*
antlabs:inngate_ig_3100	antlabs inngate ig 3100	eq	*
antlabs:inngate_ig_3101	antlabs inngate ig 3101	eq	*
antlabs:inngate_ig_3.02_e	antlabs inngate ig 3.02 e	eq	*

References

blog.cylance.com/spear-team-cve-2015-0932

www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133

www.kb.cert.org/vuls/id/930956

www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/