CVE-2023-7161: high-severity vulnerability in Netentsec NS-ASG Application Security Gateway
Netentsec NS-ASG Application Security Gateway Login sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.7%
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249183.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Netentsec · NS-ASG Application Security GatewayRelated CVEs — Netentsec NS-ASG Application Security Gateway
In the same product, most dangerous first.
CVE-2024-2330MEDIUMNetentsec NS-ASG Application Security Gateway index.php sql injectionEPSS 17.6%CVE-2024-2022MEDIUMNetentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injectionEPSS 8.5%CVE-2024-2647HIGHNetentsec NS-ASG Application Security Gateway singlelogin.php sql injectionEPSS 1.0%CVE-2023-7094MEDIUMNetentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosureEPSS 0.9%CVE-2024-2649MEDIUMNetentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injectionEPSS 0.8%CVE-2024-2644MEDIUMNetentsec NS-ASG Application Security Gateway addfirewall.php sql injectionEPSS 0.8%