CVE-2015-0932
HighSummary
The ANTlabs InnGate firmware on IG 3100, IG 3101, and InnGate 3.00 E, 3.01 E, 3.02 E, 3.10 E, 3.01 G, and 3.10 G devices does not require authentication for rsync sessions, allowing remote attackers to read or write to arbitrary files via TCP traffic on port 873.
Risk Assessment
The lack of authentication in rsync sessions poses a significant security risk, enabling attackers to access sensitive data and potentially modify it.
Recommendation
It is recommended to configure authentication for rsync sessions and monitor traffic on port 873 to detect unauthorized access attempts.
Other vulnerabilities in ANTlabs InnGate firmware
Original NVD description (English source)
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.