CVE:CVE-2015-2850
CNNVD:CNNVD-201507-161
ANTlabs InnGate firmware on IG 3100等是新加坡ANTlabs公司的一款用于IG 3100网关等设备中的固件。
多款ANTlabs设备的ANTlabs InnGate固件中的index-login.ant文件中存在跨站脚本漏洞。远程攻击者可借助‘msg’参数利用该漏洞注入任意Web脚本或HTML。以下产品受到影响：ANTlabs IG 3100，InnGate 3.01 E，InnGate 3.10 E，InnGate 3.10 M，SG 4，SSG 4。
solution:Upgrade antlabs inngate_ig_3.01_e to a higher version than -; Upgrade antlabs inngate_ig_3.10_e to a higher version than -; Upgrade antlabs inngate_ig_3.10_m to a higher version than -; Upgrade antlabs inngate_ig_3100 to a higher version than -; Upgrade antlabs inngate_sg_4 to a higher version than -; Upgrade antlabs inngate_ssg_4 to a higher version than -