Details of VAR-201507-0145

ID

VAR-201507-0145

CVE

CVE-2015-2850

TITLE

ANTlabs InnGate Firmware Cross-Site Scripting Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2015-04403 // CNNVD: CNNVD-201507-161

DESCRIPTION

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter. ANTlabs InnGate is a gateway device designed for operating corporate guest/visitor networks. Multiple InnGate models have been confirmed to be vulnerable to SQL injection and cross-site scripting attacks. ANTlabs InnGate firmware on IG 3100 is a firmware used by ANTlabs in Singapore for devices such as the IG 3100 gateway. A cross-site scripting vulnerability exists in the index-login.ant file in the ANTlabs InnGate firmware for several ANTlabs devices. If the user can be tempted to click on an XSS injection link. A remote attacker could exploit this vulnerability to obtain a user credential administrator panel. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database

Trust: 3.15

sources: NVD: CVE-2015-2850 // CERT/CC: VU#485324 // JVNDB: JVNDB-2015-003475 // CNVD: CNVD-2015-04403 // BID: 75560

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-04403

AFFECTED PRODUCTS

vendor:	antlabs	model:	inngate ig 3.01 e	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3.10 e	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ssg 4	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate sg 4	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3.10 m	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate ig 3100	scope:	eq	version:	-	Trust: 1.6
vendor:	antlabs	model:	inngate e-series	scope:	eq	version:	3.01	Trust: 0.9
vendor:	antlabs	model:	inngate e-series	scope:	eq	version:	3.10	Trust: 0.9
vendor:	antlabs	model:	inngate m-series	scope:	eq	version:	3.10	Trust: 0.9
vendor:	antlabs	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ig 3100	scope:	eq	version:	model 3100	Trust: 0.8
vendor:	antlabs	model:	ig 3100	scope:	eq	version:	model 3101	Trust: 0.8
vendor:	antlabs	model:	inngate 3.00 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.01 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.01 g-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.02 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.10 e-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	inngate 3.10 g-series	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	sg 4	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ssg 4	scope:	-	version:	-	Trust: 0.8
vendor:	antlabs	model:	ssg	scope:	eq	version:	4	Trust: 0.3
vendor:	antlabs	model:	sg	scope:	eq	version:	4	Trust: 0.3
vendor:	antlabs	model:	ig3100	scope:	eq	version:	0	Trust: 0.3

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04403 // BID: 75560 // JVNDB: JVNDB-2015-003475 // CNNVD: CNNVD-201507-161 // NVD: CVE-2015-2850

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-2850
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2015-2850
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2015-04403
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201507-161
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2015-2850
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2015-04403
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2015-04403 // JVNDB: JVNDB-2015-003475 // CNNVD: CNNVD-201507-161 // NVD: CVE-2015-2850

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.8

sources: JVNDB: JVNDB-2015-003475 // NVD: CVE-2015-2850

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201507-161

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201507-161

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-003475

PATCH

title:	Advisory: SQL Injection and Reflected Cross Site Scripting Vulnerabilities (CVE-201502849 and CVE-2015-2850)	url:	http://www.antlabs.com/advisory-sql-injection-reflected-cross-site-scripting-vulnerabilities/	Trust: 0.8
title:	Patch for ANTlabs InnGate Firmware Cross-Site Scripting Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/60654	Trust: 0.6

sources: CNVD: CNVD-2015-04403 // JVNDB: JVNDB-2015-003475

EXTERNAL IDS

db:	CERT/CC	id:	VU#485324	Trust: 4.1
db:	NVD	id:	CVE-2015-2850	Trust: 3.3
db:	BID	id:	75560	Trust: 0.9
db:	JVN	id:	JVNVU92209185	Trust: 0.8
db:	JVNDB	id:	JVNDB-2015-003475	Trust: 0.8
db:	CNVD	id:	CNVD-2015-04403	Trust: 0.6
db:	CNNVD	id:	CNNVD-201507-161	Trust: 0.6

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04403 // BID: 75560 // JVNDB: JVNDB-2015-003475 // CNNVD: CNNVD-201507-161 // NVD: CVE-2015-2850

REFERENCES

url:	http://www.kb.cert.org/vuls/id/485324	Trust: 3.3
url:	about vulnerability notes	Trust: 0.8
url:	contact us about this vulnerability	Trust: 0.8
url:	provide a vendor statement	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2850	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu92209185	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-2850	Trust: 0.8
url:	http://www.antlabs.com/	Trust: 0.3

sources: CERT/CC: VU#485324 // CNVD: CNVD-2015-04403 // BID: 75560 // JVNDB: JVNDB-2015-003475 // CNNVD: CNNVD-201507-161 // NVD: CVE-2015-2850

CREDITS

Devesh Logendran

Trust: 0.3

sources: BID: 75560

SOURCES

db:	CERT/CC	id:	VU#485324
db:	CNVD	id:	CNVD-2015-04403
db:	BID	id:	75560
db:	JVNDB	id:	JVNDB-2015-003475
db:	CNNVD	id:	CNNVD-201507-161
db:	NVD	id:	CVE-2015-2850

LAST UPDATE DATE

2025-04-13T23:14:31.840000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#485324	date:	2015-07-06T00:00:00
db:	CNVD	id:	CNVD-2015-04403	date:	2015-07-13T00:00:00
db:	BID	id:	75560	date:	2015-07-06T00:00:00
db:	JVNDB	id:	JVNDB-2015-003475	date:	2015-07-10T00:00:00
db:	CNNVD	id:	CNNVD-201507-161	date:	2015-07-08T00:00:00
db:	NVD	id:	CVE-2015-2850	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#485324	date:	2015-07-06T00:00:00
db:	CNVD	id:	CNVD-2015-04403	date:	2015-07-13T00:00:00
db:	BID	id:	75560	date:	2015-07-06T00:00:00
db:	JVNDB	id:	JVNDB-2015-003475	date:	2015-07-10T00:00:00
db:	CNNVD	id:	CNNVD-201507-161	date:	2015-07-08T00:00:00
db:	NVD	id:	CVE-2015-2850	date:	2015-07-07T14:59:00.980