Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2015-0932

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Antlabs
Products
Inngate Ig 3.00 E Inngate Ig 3.01 E Inngate Ig 3.02 E and 4 more
CVE-2015-2849

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Antlabs
Products
Inngate Ig 3.01 E Inngate Ig 3.10 E Inngate Ig 3.10 M and 3 more
CVE-2015-2850

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Antlabs
Products
Inngate Ig 3.01 E Inngate Ig 3.10 E Inngate Ig 3.10 M and 3 more