https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-2850.htmlhttps://patchthecve.com/cve/CVE-2015-2850.htmlWed, 17 Jun 2026 00:24:51 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.https://patchthecve.com/cve/CVE-2015-2849.htmlhttps://patchthecve.com/cve/CVE-2015-2849.htmlWed, 17 Jun 2026 00:24:51 +0000HIGH 7.5: SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.https://patchthecve.com/cve/CVE-2015-0932.htmlhttps://patchthecve.com/cve/CVE-2015-0932.htmlWed, 17 Jun 2026 00:21:10 +0000HIGH 10.0: The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 8