Lucene search
HistoryJul 07, 2015 - 2:59 p.m.
CVE-2015-2849
cve-2015-2849
sql injection
antlabs
inngate firmware
ig 3100
inngate 3.01 e
inngate 3.10 e
inngate 3.10 m
sg 4
ssg 4
https
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.
Affected configurations
Node
antlabsinngate_ig_3.01_eMatch-
ORantlabsinngate_ig_3.10_eMatch-
ORantlabsinngate_ig_3.10_mMatch-
ORantlabsinngate_ig_3100Match-
ORantlabsinngate_sg_4Match-
ORantlabsinngate_ssg_4Match-
References
Related
nvd
nvd
CVE-2015-2849
2015-07-07 14:59:00
cvelist
cvelist
CVE-2015-2849
2015-07-07 14:00:00
prion
prion
Sql injection
2015-07-07 14:59:00
cert
cert
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
Related for CVE-2015-2849