« Volver al listado

CVE-2015-0932

Estado: ModificadaAlta (10)—

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Antlabs — Inngate IG 3.00 EAntlabs — Inngate IG 3.01 EAntlabs — Inngate IG 3.02 EAntlabs — Inngate IG 3.10 EAntlabs — Inngate IG 3.10 GAntlabs — Inngate IG 3100Antlabs — Inngate IG 3101

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0932",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-04-05T01:59:01.163",
  "references": [
    {
      "url": "http://blog.cylance.com/spear-team-cve-2015-0932",
      "tags": [
        "Exploit"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/930956",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/",
      "source": "cret@cert.org"
    },
    {
      "url": "http://blog.cylance.com/spear-team-cve-2015-0932",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/930956",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873."
    },
    {
      "lang": "es",
      "value": "El firmware ANTlabs InnGate en los dispositivos IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, y InnGate 3.10 G no requiere autenticación para las sesiones rsync, lo que permite a atacantes remotos leer o escribir a ficheros arbitrarios a través de trafico TCP en el puerto 873."
    }
  ],
  "lastModified": "2026-06-17T00:21:10.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.00_e:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C98B2BC1-7343-4B40-B881-FBD115788003"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.01_e:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D887F08E-E312-453E-BFC5-D1E2AEC38415"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.02_e:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C30EB6A8-7469-4734-BFC2-4A44BAABA38A"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_e:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25195541-04D9-4593-A572-C1F874479594"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_g:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C957E44-295A-4415-ABA5-756162885BC1"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3860A74-8424-4CE4-B2CE-1FDDC59C0CF4"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3101:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2449B53D-8ECF-4791-871F-9555025FFCD1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}