Lucene search

MitreVULNRICHMENT:CVE-2024-28521

HistoryMar 21, 2024 - 12:00 a.m.

CVE-2024-28521

2024-03-2100:00:00

mitre

github.com

netcome ns-asg

sql injection

local attacker

arbitrary code

sensitive information

crafted script

loginid parameter

AI Score

8.3

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:netcome:ns-asg:6.3.1:*:*:*:*:*:*:*"
    ],
    "vendor": "netcome",
    "product": "ns-asg",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/aknbg1thub/cve/blob/main/sql.md