« Volver al listado

CVE-2015-2850

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Antlabs — Inngate IG 3.01 EAntlabs — Inngate IG 3.10 EAntlabs — Inngate IG 3.10 MAntlabs — Inngate IG 3100Antlabs — Inngate SG 4Antlabs — Inngate SSG 4

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-2850",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-07-07T14:59:00.980",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/485324",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/485324",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de XSS en index-login.ant en ANTlabs InnGate Firmware en los dispositivos IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, y SSG 4 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios a través del parámetro msg."
    }
  ],
  "lastModified": "2026-06-17T00:24:51.903",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.01_e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05D05CE4-2981-43D7-B80C-DE264FF4413B"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C52E287E-8D66-434D-BF0B-A57DBA4D6321"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3.10_m:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3AB0909-139C-4BA3-8F24-3B87FAF33BBF"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ig_3100:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3698F0B4-CD2F-478A-AC38-CAC91011DE80"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_sg_4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89B29893-6A55-46E4-8281-6B12B3C604ED"
            },
            {
              "criteria": "cpe:2.3:h:antlabs:inngate_ssg_4:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A593B94-BE7E-498D-BACF-80E51655818C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}