PT-2015-4980 · Antlabs · Inngate

Justin Clarke + 1 · Published 2015-04-05 · Updated 2015-04-15 · CVE-2015-0932

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ANTlabs InnGate firmware versions on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G

Description The issue allows remote attackers to read or write to arbitrary files via TCP traffic on port 873, due to the lack of authentication requirement for rsync sessions.

Recommendations For all affected versions, consider restricting access to TCP port 873 to minimize the risk of exploitation. As a temporary workaround, restrict rsync sessions to only trusted sources until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-0932

Affected Products

Inngate

References · 5

• 🔥 http://blog.cylance.com/spear-team-cve-2015-0932 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-0932 · Security Note
• http://antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133 · Vendor Advisory
• http://wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk · Note
• http://kb.cert.org/vuls/id/930956 · Note