medium4.3
CVE-2015-2850
Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, a…
Impact
Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Antlabs | Inngate Ig 3.01 E | All versions |
| Antlabs | Inngate Ig 3.10 E | All versions |
| Antlabs | Inngate Ig 3.10 M | All versions |
| Antlabs | Inngate Ig 3100 | All versions |
| Antlabs | Inngate Sg 4 | All versions |
| Antlabs | Inngate Ssg 4 | All versions |