CVE-2024-2330mediumexplotación observadaCWE-89

CVE-2024-2330: fallo de gravedad media en Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway index.php sql injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear NS-ASG Application Security Gateway

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

75Vexday Risk Score

Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.

ssvc Actcvss 6.3epss 18%
de la publicación al arma976 días
Publicada en NVD9 mar
1ª PoC+976d
VulnCheck+201d
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
Netentsec · NS-ASG Application Security Gateway
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Netentsec NS-ASG Application Security Gateway

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-2022MEDIUMNetentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injectionEPSS 8.5%CVE-2024-2647HIGHNetentsec NS-ASG Application Security Gateway singlelogin.php sql injectionEPSS 1.0%CVE-2023-7094MEDIUMNetentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosureEPSS 0.9%CVE-2024-2649MEDIUMNetentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injectionEPSS 0.8%CVE-2024-2644MEDIUMNetentsec NS-ASG Application Security Gateway addfirewall.php sql injectionEPSS 0.8%CVE-2024-3041MEDIUMNetentsec NS-ASG Application Security Gateway listloginfo.php sql injectionEPSS 0.8%