CVE-2023-30806

🗓️ 10 Oct 2023 14:27:42Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to OS command injection via crafted HTTP POST request

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-30806	10 Oct 202318:16	–	circl
CNNVD	Sangfor Next-Gen Application Firewall Operating System Command Injection Vulnerability	10 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-30806 Sangfor Next-Gen Application Firewall PHPSESSID Command Injection	10 Oct 202314:27	–	cvelist
NVD	CVE-2023-30806	10 Oct 202315:15	–	nvd
Prion	Command injection	10 Oct 202315:15	–	prion
Positive Technologies	PT-2023-6169	10 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-30806	23 May 202505:17	–	redhatcve
Vulnrichment	CVE-2023-30806 Sangfor Next-Gen Application Firewall PHPSESSID Command Injection	10 Oct 202314:27	–	vulnrichment

NVD

Vulners

CNA

Node

sangfor next-gen_application_firewallMatchngaf8.0.17

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Net-Gen Application Firewall",
    "vendor": "Sangfor",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.17"
      }
    ]
  }
]

Source	Link
labs	www.labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/
aws	www.aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4
vulncheck	www.vulncheck.com/advisories/sangfor-ngaf-sessid-rce

Parameter	Position	Path	Description	CWE
PHPSESSID	header	/cgi-bin/login.cgi	OS command injection via crafted PHPSESSID cookie in a POST to /cgi-bin/login.cgi	CWE-78

22 Nov 2025 15:16Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.14849

SSVC

CWE-78