CVE-2024-2330mediumexploração observadaCWE-89

CVE-2024-2330: falha de média gravidade em Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway index.php sql injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar NS-ASG Application Security Gateway

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

75Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 6.3epss 18%
da publicação à arma976 dias
Publicada no NVD9 de mar.
1ª PoC+976d
VulnCheck+201d
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Netentsec · NS-ASG Application Security Gateway
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Netentsec NS-ASG Application Security Gateway

No mesmo produto, das mais perigosas para as menos.

CVE-2024-2022MEDIUMNetentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injectionEPSS 8.5%CVE-2024-2647HIGHNetentsec NS-ASG Application Security Gateway singlelogin.php sql injectionEPSS 1.0%CVE-2023-7094MEDIUMNetentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosureEPSS 0.9%CVE-2024-2649MEDIUMNetentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injectionEPSS 0.8%CVE-2024-2644MEDIUMNetentsec NS-ASG Application Security Gateway addfirewall.php sql injectionEPSS 0.8%CVE-2024-3041MEDIUMNetentsec NS-ASG Application Security Gateway listloginfo.php sql injectionEPSS 0.8%