high7.5
CVE-2015-2849
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, wh…
Impact
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Antlabs | Inngate Ig 3.01 E | All versions |
| Antlabs | Inngate Ig 3.10 E | All versions |
| Antlabs | Inngate Ig 3.10 M | All versions |
| Antlabs | Inngate Ig 3100 | All versions |
| Antlabs | Inngate Sg 4 | All versions |
| Antlabs | Inngate Ssg 4 | All versions |