CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
75.5%
Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Vendor | Product | Version | CPE |
---|---|---|---|
antlabs | inngate_ig_3.01_e | - | cpe:2.3:h:antlabs:inngate_ig_3.01_e:-:*:*:*:*:*:*:* |
antlabs | inngate_ig_3.10_e | - | cpe:2.3:h:antlabs:inngate_ig_3.10_e:-:*:*:*:*:*:*:* |
antlabs | inngate_ig_3.10_m | - | cpe:2.3:h:antlabs:inngate_ig_3.10_m:-:*:*:*:*:*:*:* |
antlabs | inngate_ig_3100 | - | cpe:2.3:h:antlabs:inngate_ig_3100:-:*:*:*:*:*:*:* |
antlabs | inngate_sg_4 | - | cpe:2.3:h:antlabs:inngate_sg_4:-:*:*:*:*:*:*:* |
antlabs | inngate_ssg_4 | - | cpe:2.3:h:antlabs:inngate_ssg_4:-:*:*:*:*:*:*:* |