NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the file /admin/configguide/ipsecguide1.php...

CVE-2024-30860

CVE-2024-30860 affects netentsec NS-ASG version 6.3. The connected documents specify a SQL Injection in the endpoint /admin/export_excel_user.php, indicating an input handling/root-cause issue that allows arbitrary SQL execution. The impact is described as high (confidentiality, integrity, availa...

CVE-2024-30868

CVE-2024-30868 affects netentsec NS‑ASG 6.3, with a SQL Injection vulnerability in /admin/add_getlogin.php. The issue is triggered via user-controlled input and is rated Critical (CVSS 3.1: 9.8, Network access, no user interaction, high confidentiality/ integrity/ availability impact). Public ref...

CVE-2024-30871

CVE-2024-30871 affects netentsec NS-ASG 6.3 and is a SQL Injection vulnerability in the /WebPages/applyhardware.php endpoint. Reported across multiple sources (NVD/Red Hat/CNNVD, CVE list) with CVSS 3.1 base score 8.8 (Network attack vector, high impact on confidentiality, integrity, availability...

CVE-2024-30864

CVE-2024-30864 affects netentsec NS-ASG 6.3 with an SQL Injection vulnerability in the /admin/config_ISCGroupTimePolicy.php endpoint. The CVSSv3.1 vector is AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L (base score 6.3, MEDIUM). Attack requires adjacent access, no privileges, and no user interaction; impac...

CVE-2024-30862

NetentSec NS-ASG 6.3 is vulnerable to SQL Injection via the /3g/index.php endpoint. Affected component: NS-ASG 6.3. Reported impact includes high confidentiality, integrity, and availability according to CVSS metrics. The connected sources confirm the vulnerability detail; no patch/version remedi...

CVE-2024-30859

Affected product: netentsec NS-ASG 6.3. Vulnerability: SQL injection in /admin/config_ISCGroupSSLCert.php. The issue arises from improper handling of input, enabling an attacker to manipulate SQL queries. Impact: According to multiple sources, this can impact confidentiality, integrity, and avail...

PT-2024-23638 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/export excel user.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

PT-2024-23646 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/add getlogin.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...

PT-2024-23648 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/address interpret.php" API endpoint. There is no information provided about the estimated number of potentially affected...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3040

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-3040

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3040 Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...