CVE-2015-0932

published 2015-04-05

CVE-2015-0932: The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices…

Priority P2 60 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.

Detection & IOCs extracted from sources · hover to see the quote

port 873↗

• → ANTlabs InnGate devices expose rsync (TCP/873) without authentication, allowing unauthenticated remote read/write of arbitrary files. Monitor for unauthenticated rsync sessions to/from InnGate devices on TCP port 873. ↗

• · Affected devices include ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G. The vulnerability is the absence of authentication on the rsync daemon, not a software flaw requiring a patch version check. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264