Unrated severityNVD Advisory· Published Jul 7, 2015· Updated May 6, 2026
CVE-2015-2849
CVE-2015-2849
Description
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.
Affected products
6- cpe:2.3:h:antlabs:inngate_ig_3.01_e:-:*:*:*:*:*:*:*
- cpe:2.3:h:antlabs:inngate_ig_3.10_e:-:*:*:*:*:*:*:*
- cpe:2.3:h:antlabs:inngate_ig_3.10_m:-:*:*:*:*:*:*:*
- cpe:2.3:h:antlabs:inngate_ig_3100:-:*:*:*:*:*:*:*
- cpe:2.3:h:antlabs:inngate_sg_4:-:*:*:*:*:*:*:*
- cpe:2.3:h:antlabs:inngate_ssg_4:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.kb.cert.org/vuls/id/485324nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.