CVE-2015-2849

2015-07-0714:00:00

certcc

www.cve.org

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.6%

JSON

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.

References

www.kb.cert.org/vuls/id/485324