Details of VAR-201507-0144

ID

VAR-201507-0144

CVE

CVE-2015-2849

TITLE

ANTlabs InnGate Firmware SQL Injection Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2015-04404 // CNNVD: CNNVD-201507-160

DESCRIPTION

SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter. ANTlabs InnGate is a gateway device designed for operating corporate guest/visitor networks. Multiple InnGate models have been confirmed to be vulnerable to SQL injection and cross-site scripting attacks. ANTlabs InnGate firmware on IG 3100 is a firmware used by ANTlabs in Singapore for devices such as the IG 3100 gateway. A remote attacker can execute arbitrary queries on the underlying database. According to ANTLabs, only HTTPS connections are vulnerable to this type of attack. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database

Trust: 3.15

sources: NVD: CVE-2015-2849 // CERT/CC: VU#485324 // JVNDB: JVNDB-2015-003474 // CNVD: CNVD-2015-04404 // BID: 75560

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-04404

AFFECTED PRODUCTS

vendor:	antlabs	model:	inngate ig 3.01 e	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3.10 e	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ssg 4	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate sg 4	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3.10 m	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3100	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate e-series	scope:	eq	version:	3.01	Trust: 0.9
vendor:	antlabs	model:	inngate e-series	scope:	eq	version:	3.10	Trust: 0.9
vendor:	antlabs	model:	inngate m-series	scope:	eq	version:	3.10	Trust: 0.9
vendor:	antlabs	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ig 3100	scope:	eq	version:	model 3100	Trust: 0.8
vendor:	antlabs	model:	ig 3100	scope:	eq	version:	model 3101	Trust: 0.8
vendor:	antlabs	model:	inngate 3.00 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.01 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.01 g-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.02 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.10 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.10 g-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	sg 4	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ssg 4	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ssg	scope:	eq	version:	4	Trust: 0.3
vendor:	antlabs	model:	sg	scope:	eq	version:	4	Trust: 0.3
vendor:	antlabs	model:	ig3100	scope:	eq	version:	0	Trust: 0.3

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04404 // BID: 75560 // JVNDB: JVNDB-2015-003474 // CNNVD: CNNVD-201507-160 // NVD: CVE-2015-2849

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-2849
value:	HIGH
Trust: 1.0
NVD:	CVE-2015-2849
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2015-04404
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201507-160
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2015-2849
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2015-04404
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2015-04404 // JVNDB: JVNDB-2015-003474 // CNNVD: CNNVD-201507-160 // NVD: CVE-2015-2849

PROBLEMTYPE DATA

problemtype:

CWE-89

Trust: 1.8

sources: JVNDB: JVNDB-2015-003474 // NVD: CVE-2015-2849

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201507-160

TYPE

SQL injection

Trust: 0.6

sources: CNNVD: CNNVD-201507-160

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-003474

PATCH

title:	Advisory: SQL Injection and Reflected Cross Site Scripting Vulnerabilities (CVE-201502849 and CVE-2015-2850)	url:	http://www.antlabs.com/advisory-sql-injection-reflected-cross-site-scripting-vulnerabilities/	Trust: 0.8
title:	Patch for ANTlabs InnGate Firmware SQL Injection Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/60652	Trust: 0.6

sources: CNVD: CNVD-2015-04404 // JVNDB: JVNDB-2015-003474

EXTERNAL IDS

db:	CERT/CC	id:	VU#485324	Trust: 4.1
db:	NVD	id:	CVE-2015-2849	Trust: 3.3
db:	BID	id:	75560	Trust: 0.9
db:	JVN	id:	JVNVU92209185	Trust: 0.8
db:	JVNDB	id:	JVNDB-2015-003474	Trust: 0.8
db:	CNVD	id:	CNVD-2015-04404	Trust: 0.6
db:	CNNVD	id:	CNNVD-201507-160	Trust: 0.6

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04404 // BID: 75560 // JVNDB: JVNDB-2015-003474 // CNNVD: CNNVD-201507-160 // NVD: CVE-2015-2849

REFERENCES

url:	http://www.kb.cert.org/vuls/id/485324	Trust: 3.3
url:	about vulnerability notes	Trust: 0.8
url:	contact us about this vulnerability	Trust: 0.8
url:	provide a vendor statement	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2849	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu92209185	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-2849	Trust: 0.8
url:	http://www.antlabs.com/	Trust: 0.3

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04404 // BID: 75560 // JVNDB: JVNDB-2015-003474 // CNNVD: CNNVD-201507-160 // NVD: CVE-2015-2849

CREDITS

Devesh Logendran

Trust: 0.3

sources: BID: 75560

SOURCES

db:	CERT/CC	id:	VU#485324
db:	CNVD	id:	CNVD-2015-04404
db:	BID	id:	75560
db:	JVNDB	id:	JVNDB-2015-003474
db:	CNNVD	id:	CNNVD-201507-160
db:	NVD	id:	CVE-2015-2849

LAST UPDATE DATE

2025-04-13T23:14:31.805000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#485324	date:	2015-07-06T00:00:00
db:	CNVD	id:	CNVD-2015-04404	date:	2015-07-13T00:00:00
db:	BID	id:	75560	date:	2015-07-06T00:00:00
db:	JVNDB	id:	JVNDB-2015-003474	date:	2015-07-10T00:00:00
db:	CNNVD	id:	CNNVD-201507-160	date:	2015-07-08T00:00:00
db:	NVD	id:	CVE-2015-2849	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#485324	date:	2015-07-06T00:00:00
db:	CNVD	id:	CNVD-2015-04404	date:	2015-07-13T00:00:00
db:	BID	id:	75560	date:	2015-07-06T00:00:00
db:	JVNDB	id:	JVNDB-2015-003474	date:	2015-07-10T00:00:00
db:	CNNVD	id:	CNNVD-201507-160	date:	2015-07-08T00:00:00
db:	NVD	id:	CVE-2015-2849	date:	2015-07-07T14:59:00.090