PatchTheCVECVE-2015-0932: The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10
CVE-2015-0932 is a high-severity flaw (CVSS 10.0) affecting inngate ig 3.00 e, inngate ig 3.01 e, inngate ig 3.02 e. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
Why this priority
- Critical severity
- EPSS top 7%: very likely to be exploited
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 5.6% (top 7%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2015-04-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2015-0932?
inngate ig 3.00 e: mitigate or apply the listed mitigation; inngate ig 3.01 e: mitigate or apply the listed mitigation; inngate ig 3.02 e: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2015-0932 being exploited?
CVE-2015-0932 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2015-0932 affect?
CVE-2015-0932 affects inngate ig 3.00 e, inngate ig 3.01 e, inngate ig 3.02 e. Severity is high (CVSS 10.0). The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers t
How urgent is CVE-2015-0932?
Priority 63/100. Critical severity; EPSS top 7%: very likely to be exploited; Public exploit reference