CVE-2024-30858

Netentsec NS-ASG 6.3 is affected by a SQL Injection in the /admin/edit_fire_wall.php endpoint. The CVE (CVE-2024-30858) is supported by Red Hat, NVD, CNNVD, CVE.org, and PT Security, indicating the vulnerable component and endpoint, with a CVSS v3.1 base score of 9.8 (CRITICAL) and network access...

CVE-2024-30865

CVE-2024-30865 concerns netentsec NS-ASG 6.3, where an SQL injection vulnerability exists in the web path /admin/edit_user_login.php . The vulnerability is documented across multiple sources (NVD, Red Hat, CNNVD, CVE listing) with a CVSS v3.1 base score of 9.8 (CRITICAL) , indicating high impact ...

CVE-2024-30864

CVE-2024-30864 affects netentsec NS-ASG 6.3 with an SQL Injection vulnerability in the /admin/config_ISCGroupTimePolicy.php endpoint. The CVSSv3.1 vector is AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L (base score 6.3, MEDIUM). Attack requires adjacent access, no privileges, and no user interaction; impac...

CVE-2024-30871

CVE-2024-30871 affects netentsec NS-ASG 6.3 and is a SQL Injection vulnerability in the /WebPages/applyhardware.php endpoint. Reported across multiple sources (NVD/Red Hat/CNNVD, CVE list) with CVSS 3.1 base score 8.8 (Network attack vector, high impact on confidentiality, integrity, availability...

CVE-2024-30870

Summary: CVE-2024-30870 affects netentsec NS-ASG 6.3, with a SQL Injection vulnerability in the /admin/address_interpret.php endpoint. The vulnerability is classified with CVSS 3.1 base score 8.8 (HIGH) and is network-exposed with low attack complexity, requiring low privileges and no user intera...

PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30859

Affected product: netentsec NS-ASG 6.3. Vulnerability: SQL injection in /admin/config_ISCGroupSSLCert.php. The issue arises from improper handling of input, enabling an attacker to manipulate SQL queries. Impact: According to multiple sources, this can impact confidentiality, integrity, and avail...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/addressinterpret.php file...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

PT-2024-23638 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/export excel user.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30865

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3040

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...