Netentsec vulnerabilities

Products

• application security gateway 35
• NS-ASG Application Security Gateway 29
• ns-asg firmware 16
• ns-asg 6
• application security gateway firmware 3

Latest Netentsec CVEs

Newest publication first · page 1 of 2

1. CVE-2024-6007 Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection

   Published 2024-06-15

   Medium·CVSS 5.3 EPSS 0.60%

   A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql injection. It is possi...

2. CVE-2024-5773 Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection

   Published 2024-06-09

   Medium·CVSS 5.3 EPSS 0.65%

   A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possi...

3. CVE-2024-5772 Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection

   Published 2024-06-09

   Medium·CVSS 5.3 EPSS 0.68%

   A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent leads to sql injecti...

4. CVE-2024-5590 Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection

   Published 2024-06-03

   Medium·CVSS 5.3 EPSS 0.62%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of the argument messag...

5. CVE-2024-5589 Netentsec NS-ASG Application Security Gateway sql injection

   Published 2024-06-03

   Medium·CVSS 5.3 EPSS 0.54%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is possible to initiate...

6. CVE-2024-3458 Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.71%

   A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely....

7. CVE-2024-3457 Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.68%

   A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the...

8. CVE-2024-3456 Netentsec NS-ASG Application Security Gateway config_Anticrack.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.76%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack...

9. CVE-2024-3455 Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.73%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId leads to sql injection...

10. CVE-2024-30872 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

    Published 2024-04-01

    Medium·CVSS 5.1 EPSS 0.29%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

11. CVE-2024-30859 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.67%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

12. CVE-2024-30865 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

    Published 2024-04-01

    Critical·CVSS 9.8 EPSS 0.70%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

13. CVE-2024-30871 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.71%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

14. CVE-2024-30867 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

    Published 2024-04-01

    Critical·CVSS 9.8 EPSS 0.70%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

15. CVE-2024-30861 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

    Published 2024-04-01

    Medium·CVSS 5.3 EPSS 0.45%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

16. CVE-2024-30864 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

    Published 2024-04-01

    Medium·CVSS 6.3 EPSS 0.35%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

17. CVE-2024-30870 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.67%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

18. CVE-2024-30866 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

    Published 2024-04-01

    Medium·CVSS 5.4 EPSS 0.35%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

19. CVE-2024-30858 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

    Published 2024-04-01

    Critical·CVSS 9.8 EPSS 0.73%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

20. CVE-2024-30860 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.61%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

21. CVE-2024-30868 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

    Published 2024-04-01

    Critical·CVSS 9.8 EPSS 0.70%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

22. CVE-2024-30862 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.66%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

23. CVE-2024-30863 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

    Published 2024-04-01

    Medium·CVSS 6.3 EPSS 0.44%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

24. CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

    Published 2024-03-28

    Critical·CVSS 9.8 EPSS 0.82%

    A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The ex...

25. CVE-2024-3040 Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection

    Published 2024-03-28

    Critical·CVSS 9.8 EPSS 0.82%

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack r...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.