CVE-2015-0932
antlabs: no CVSS score yet. EPSS 5.6% chance of exploitation in the next 30 days.
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
- EPSS
- 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- antlabs:inngate_ig_3.00_e
- antlabs:inngate_ig_3.01_e
- antlabs:inngate_ig_3.02_e
- antlabs:inngate_ig_3.10_e
- antlabs:inngate_ig_3.10_g
- antlabs:inngate_ig_3100
- antlabs:inngate_ig_3101
References
- http://blog.cylance.com/spear-team-cve-2015-0932
- http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
- http://www.kb.cert.org/vuls/id/930956
- http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/
- http://blog.cylance.com/spear-team-cve-2015-0932