« Volver al listado

CVE-2015-2849

Estado: ModificadaAlta (7.5)—

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Antlabs — Inngate IG 3.01 EAntlabs — Inngate IG 3.10 EAntlabs — Inngate IG 3.10 MAntlabs — Inngate IG 3100Antlabs — Inngate SG 4Antlabs — Inngate SSG 4

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-2849",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-07-07T14:59:00.090",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/485324",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/485324",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección SQL en main.ant en ANTlabs InnGate Firmware en los dispositivos IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, y SSG 4, cuando https está utilizado, permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro ppli."
    }
  ],
  "lastModified": "2026-06-17T00:24:51.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.01_e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05D05CE4-2981-43D7-B80C-DE264FF4413B"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C52E287E-8D66-434D-BF0B-A57DBA4D6321"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_m:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3AB0909-139C-4BA3-8F24-3B87FAF33BBF"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3100:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3698F0B4-CD2F-478A-AC38-CAC91011DE80"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_sg_4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89B29893-6A55-46E4-8281-6B12B3C604ED"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ssg_4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A593B94-BE7E-498D-BACF-80E51655818C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}