Net-Gen Application Firewall vulnerabilities

3 known vulnerabilities in Net-Gen Application Firewall from Sangfor. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Net-Gen Application Firewall: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-30806Oct 10, 2023SangforEPSS 65%

  The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login

• 9.8 Critical severity

  Net-Gen Application Firewall: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-30805Oct 10, 2023SangforEPSS 65%

  The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php

• 9.8 Critical severity

  Net-Gen Application Firewall: Authentication Bypass by Spoofing

  CVE-2023-30803Oct 10, 2023SangforEPSS 20.9%

  The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a craft