CVE-2015-0932
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cret@cert.org — http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
References
- http://blog.cylance.com/spear-team-cve-2015-0932
- http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
- http://www.kb.cert.org/vuls/id/930956
- http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/
- http://blog.cylance.com/spear-team-cve-2015-0932
- http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133
- http://www.kb.cert.org/vuls/id/930956
- http://www.wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk/
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.