CVE-2024-2330: medium-severity vulnerability in Netentsec NS-ASG Application Security Gateway
Netentsec NS-ASG Application Security Gateway index.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
75Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 6.3epss 18%
from disclosure to weapon976 days
Published on NVDMar 9
1st PoC+976d
VulnCheck+201d
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Netentsec · NS-ASG Application Security Gatewaypublic PoCs found — 1
vulncheckvulncheck.com/xdb/225903edb02dunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Netentsec NS-ASG Application Security Gateway
In the same product, most dangerous first.
CVE-2024-2022MEDIUMNetentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injectionEPSS 8.5%CVE-2024-2647HIGHNetentsec NS-ASG Application Security Gateway singlelogin.php sql injectionEPSS 1.0%CVE-2023-7094MEDIUMNetentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosureEPSS 0.9%CVE-2024-2649MEDIUMNetentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injectionEPSS 0.8%CVE-2024-2644MEDIUMNetentsec NS-ASG Application Security Gateway addfirewall.php sql injectionEPSS 0.8%CVE-2024-3041MEDIUMNetentsec NS-ASG Application Security Gateway listloginfo.php sql injectionEPSS 0.8%