342 matches found
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30242
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
PT-2023-22599
Name of the Vulnerable Software and Affected Versions NS-ASG version 6.3 Description A SQL injection issue was found in the /admin/add ikev2.php component. This allows for potential exploitation. Recommendations For NS-ASG version 6.3, as a temporary workaround, consider restricting access to the...
Netcon NS-ASG SQL注入漏洞
Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from an SQL injection vulnerability in the component /admin/addikev2.php...
PT-2023-22600
Name of the Vulnerable Software and Affected Versions Beijing Netcon NS-ASG Application Security Gateway version 6.3 Description The issue allows access to sensitive information via SQL Injection, specifically through the TunnelId. This enables unauthorized access to sensitive data. Recommendatio...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is affected by a SQL Injection via TunnelId, enabling access to sensitive information. This CVE (CVE-2023-30243) has a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, no user interaction, and no privileges required. The vulner...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30242: Improper Neutralization of Special Elements used in an SQL Command
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
CVE-2023-30243: Improper Neutralization of Special Elements used in an SQL Command
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30242
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
CVE-2023-30242
NS-ASG v6.3 contains a SQL injection vulnerability in /admin/add_ikev2.php. CVSS 3.1 base score 9.8 (CRITICAL): network vector, no auth, no UI interaction, impacts to confidentiality, integrity, and availability. Root cause details and official remediation/version patch are not specified in the p...
Netcon NS-ASG SQL注入漏洞
Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from allowing access to sensitive information via TunnelId, leading to SQL injection attacks...
Arbitrary File Download Vulnerability in Netcom NS-ASG Application Security Gateway
Beijing Netcom Technology Co., Ltd. is a provider of network application management equipment. An arbitrary file download vulnerability exists in the Netcom NS-ASG Application Security Gateway. An attacker can exploit the vulnerability to obtain sensitive information...
网康 NS-ASG 6.2 用安全网关 /admin/cert_download.php 任意 文件下载
No description provided by source...
网康 NS-ASG /admin/export_log.php type参数存在越权日志下载
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /debug/list_logfile.php 任意文件删除&任意命令执行漏洞
No description provided by source...
网康 NS-ASG 应用安全网关 6.2 /3g/index.php SQL注入
No description provided by source...
网康 NS-ASG 6.2 用安全网关 /protocol/iscdevicestatus/getsysdatetime.php 命令执行漏洞
No description provided by source...