NS-ASG Application Security Gateway vulnerabilities

27 known vulnerabilities in NS-ASG Application Security Gateway from Netentsec. 27 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-6007Jun 15, 2024Netentsec

  A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql in

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5773Jun 9, 2024Netentsec

  A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql in

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5772Jun 9, 2024Netentsec

  A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5590Jun 3, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5589Jun 3, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3458Apr 8, 2024Netentsec

  A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3457Apr 8, 2024Netentsec

  A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possi

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3456Apr 8, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql i

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3455Apr 8, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId le

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3041Mar 28, 2024Netentsec

  A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initia

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3040Mar 28, 2024Netentsec

  A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to i

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2649Mar 20, 2024Netentsec

  A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /protocol/iscdevicestatus/deleteonlineuser.php. The manipulation of the argum

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2647Mar 19, 2024Netentsec

  A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /admin/singlelogin.php. The manipulation of the argument loginId leads to sql injecti

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2646Mar 19, 2024Netentsec

  A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpnweb/index.php?para=index. The manipulation of the argument check_VirtualSiteId leads to sql injection

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2644Mar 19, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/addfirewall.php. The manipulation of the argument FireWallTableAr

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2330Mar 9, 2024NetentsecEPSS 17.6%

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2329Mar 9, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_resource_icon.php?action=delete. The manipulation of the argument IconId lea

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2022Mar 1, 2024NetentsecEPSS 8.54%

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId l

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2021Mar 1, 2024Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuser.php. The manipulation of the argument ResId leads to sql injection. It is poss

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-7161Dec 29, 2023Netentsec

  A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sq

• 7.5 High severity

  NS-ASG Application Security Gateway: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-7094Dec 25, 2023Netentsec

  A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is an unknown functionality of the file /protocol/nsasg6.0.tgz. The manipulation leads to information disclosure. The attac

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-6903Dec 17, 2023Netentsec

  A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit=1. The manipulation of the argument loginId leads to sql injection. It is possi

• 8.8 High severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-5826Oct 27, 2023Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_onlineuser.php. The manipulation of the argument SessionId leads to sql inje

• 7.5 High severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-5785Oct 26, 2023Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddress_interpret.php. The manipulation of the argument messagecontent leads to s

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-5784Oct 26, 2023Netentsec

  A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent l

• 9.8 Critical severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-5700Oct 23, 2023Netentsec

  A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sq

• 7.2 High severity

  NS-ASG Application Security Gateway: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-5681Oct 20, 2023Netentsec

  A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_addr_fwresource_ip.php. The manipulation leads to sql injection. It is possible to initiate