Vulnerability patched into Hotel WI-FI Network

Vulnerability has been discovered in hotel Wi-Fi networks, no longer placing customers at risk.The InnGate service range, developed by ANTLabs provides visitor-based Wi-Fi networks to businesses such as hotels as well as for use at conferences. It is a popular method of issuing Wi-Fi in service to hotels and provides businesses the option to bill customers based on temporary web access duration, create prepaid plans and perform check-out procedures.

 Cylance revealed vulnerability within the InnGate product line in a security advisory on Thursday. The vulnerability has been classified as CVE-2015-0932 and it occurred due to incorrect sync configuration in the firmware of certain InnGate HSIA models, which enabled external systems to obtain unrestricted read and write file access. As a result, an unauthorized user could gain full access to hotel Wi-Fi systems.

Cylance security expert Brian Wallace reported:”When an attacker gains full read and write access to a Linux file system, it’s trivial to then turn that into remote code execution. The attacker could upload a backdoored version of nearly any executable on the system and then gain execution control, or simply add an additional user with root level access and a password known to the attacker. Once full file system access is obtained, the endpoint is at the mercy of the attacker.”

 ANTLabs affirmed the existence of the vulnerability in a blogpost. The products affected are mentioned below:

  •    IG 3100 model 3100, model 3101
  •   InnGate 3.00 E-Series, 3.01 E-Series, 3.02 E-Series, 3.10 E-Series
  •    InnGate 3.01 G-Series, 3.10 G-Series

Hotel networks have always been a lucrative source for cyberattackers looking to steal valuable data and afflict victims with malware based on the quick succession of victims connecting to Wi-Fi networks offered at hotels.

 Last year Kaspersky Labs disclosed an advanced persistent threat (APT) campaign that dubbed DarkHotel. The campaign had been designed to trap incautious business travelers in Asia. They used malware skulking on hotel networks to entice them into downloading and installing trapdoors disguised as ‘welcome’ packages. In return, the victim’s PC came down with spyware.

Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

Top Suggestions To Minimize Cyber Attack Risks

The Cyber Protection and Cyber Attack definition play an important role in maintaining both global security and operational productivity due to the rapid proliferation...

Policing the Dark Web (TOR): How Authorities track People on Darknet

The darknet, especially the TOR network, can be hacked, or the information of the people using it can be extracted in the plain text....

Best VPNs for Android – and Why You Need One Now

Most people protect their laptops and computers from potential cyber-attacks but only consider the cybersecurity of their mobile devices when it’s too late. In recent...

The Levels of the Internet Surface Web, Deep Web, and Dark Web

The internet, invented by Vinton Cerf and Bob Cahn, has evolved since its creation in the 1960s. In 1990, the World Wide Web transformed...

LOOKING FOR HACKING RECIPES FORM THE PRO?

Then sign up for FREE to the ehacking’s exclusive group. You will get the exclusive tips/tricks, tutorials, webinars & courses that I ONLY share with my fellow on this exclusive newsletter.