CVE-2024-2330: Netentsec NS-ASG Application Security Gateway index.php sql injection
First published: Sat Mar 09 2024(Updated: )
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256281 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netentsec NS-ASG Application Security Gateway | ||
| Netentsec Application Security Gateway | =6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2330?
CVE-2024-2330 has been classified as critical.
What type of vulnerability is CVE-2024-2330?
CVE-2024-2330 is a SQL injection vulnerability.
How do I fix CVE-2024-2330?
To fix CVE-2024-2330, ensure that the affected application is updated to a patched version provided by Netentsec.
What software is affected by CVE-2024-2330?
CVE-2024-2330 affects Netentsec NS-ASG Application Security Gateway version 6.3.
What can attackers do with CVE-2024-2330?
With CVE-2024-2330, attackers can manipulate the IPAddr argument to execute unauthorized SQL commands.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/netentsec
- canonical/netentsec ns-asg application security gateway
- canonical/netentsec application security gateway
- version/netentsec application security gateway/6.3