Vulnerability patched into Hotel WI-FI Network

Vulnerability has been discovered in hotel Wi-Fi networks, no longer placing customers at risk.The InnGate service range, developed by ANTLabs provides visitor-based Wi-Fi networks to businesses such as hotels as well as for use at conferences. It is a popular method of issuing Wi-Fi in service to hotels and provides businesses the option to bill customers based on temporary web access duration, create prepaid plans and perform check-out procedures.

 Cylance revealed vulnerability within the InnGate product line in a security advisory on Thursday. The vulnerability has been classified as CVE-2015-0932 and it occurred due to incorrect sync configuration in the firmware of certain InnGate HSIA models, which enabled external systems to obtain unrestricted read and write file access. As a result, an unauthorized user could gain full access to hotel Wi-Fi systems.

Cylance security expert Brian Wallace reported:”When an attacker gains full read and write access to a Linux file system, it’s trivial to then turn that into remote code execution. The attacker could upload a backdoored version of nearly any executable on the system and then gain execution control, or simply add an additional user with root level access and a password known to the attacker. Once full file system access is obtained, the endpoint is at the mercy of the attacker.”

 ANTLabs affirmed the existence of the vulnerability in a blogpost. The products affected are mentioned below:

  •    IG 3100 model 3100, model 3101
  •   InnGate 3.00 E-Series, 3.01 E-Series, 3.02 E-Series, 3.10 E-Series
  •    InnGate 3.01 G-Series, 3.10 G-Series

Hotel networks have always been a lucrative source for cyberattackers looking to steal valuable data and afflict victims with malware based on the quick succession of victims connecting to Wi-Fi networks offered at hotels.

 Last year Kaspersky Labs disclosed an advanced persistent threat (APT) campaign that dubbed DarkHotel. The campaign had been designed to trap incautious business travelers in Asia. They used malware skulking on hotel networks to entice them into downloading and installing trapdoors disguised as ‘welcome’ packages. In return, the victim’s PC came down with spyware.

Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

How to Install Kali Linux on VirtualBox [Windows Host] in 2020

Kali Linux is a Debian based Linux distribution, released on the 13th March 2013 as a complete rebuild of BackTrack Linux. It is one of...

Acunetix v13 Release Introduces Groundbreaking Innovations

The newest release of the Acunetix Web Vulnerability Scanner further improves performance and premieres best-of-breed technologies London, United Kingdom – February 5, 2019 – Acunetix,...

What is Ethical Hacking, how to be an Ethical Hacker

Hacking is the process of discovering vulnerabilities in a system and using these found vulnerabilities by gaining unauthorized access into the system to perform...

Basic steps to ensure security Online!

Security concerns are growing day by day due to the growing interconnectivity and technology. Drastic things can happen if you be a little careless...