Netentsec

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Netentsec records in CISA KEV

No Netentsec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Application Security Gateway 31 records HIGH Ns-asg Firmware 15 records HIGH Application Security Gateway Firmware 2 records MEDIUM

Records

15 records in Ns-asg Firmware · all components

TI-2024-20372 CVE-2024-30868 · GHSA-ggj5-m92v-77xx

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

HIGH 82

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00696 Published 2024-04-01 No fix listed CWE-94

TI-2024-20362 CVE-2024-30858 · GHSA-mm43-ggfm-5mm4

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

HIGH 82

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00734 Published 2024-04-01 No fix listed CWE-94

TI-2024-20366 CVE-2024-30862 · GHSA-3c2h-px55-3fmw

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

HIGH 73

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00657 Published 2024-04-01 No fix listed CWE-89

TI-2024-20370 CVE-2024-30866 · GHSA-p98v-94x7-87q4

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

MEDIUM 58

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-04-01 No fix listed CWE-89

TI-2024-20371 CVE-2024-30867 · GHSA-p768-2fq7-r2q4

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

MEDIUM 49

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00696 Published 2024-04-01 No fix listed CWE-89

TI-2024-20369 CVE-2024-30865 · GHSA-cw24-292m-q722

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

MEDIUM 49

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00696 Published 2024-04-01 No fix listed CWE-89

TI-2024-20374 CVE-2024-30871 · GHSA-ggw3-6ch2-q6vf

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

MEDIUM 41

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2024-04-01 No fix listed CWE-89

TI-2024-20373 CVE-2024-30870 · GHSA-7vmw-frjx-p3mg

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

MEDIUM 41

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0067 Published 2024-04-01 No fix listed CWE-89

TI-2024-20364 CVE-2024-30860 · GHSA-h54m-6vwp-4wpq

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

MEDIUM 41

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00605 Published 2024-04-01 No fix listed CWE-89

TI-2024-20363 CVE-2024-30859 · GHSA-68vw-2c55-r944

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

MEDIUM 41

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0067 Published 2024-04-01 No fix listed CWE-89

TI-2023-21585 CVE-2023-40850 · GHSA-hgrq-77qx-v7gx

netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control.

MEDIUM 40

netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00878 Published 2023-09-13 No fix listed CWE-284

TI-2024-20368 CVE-2024-30864 · GHSA-95fq-qfw9-w29v

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

LOW 28

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00347 Published 2024-04-01 No fix listed CWE-89

TI-2024-20367 CVE-2024-30863 · GHSA-9qrm-8x3f-j2vq

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

LOW 28

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00444 Published 2024-04-01 No fix listed CWE-89

TI-2024-20365 CVE-2024-30861 · GHSA-xwvj-4p64-mggq

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

LOW 24

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00448 Published 2024-04-01 No fix listed CWE-89

TI-2024-20375 CVE-2024-30872 · GHSA-3vx2-j5pv-6cq7

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

LOW 23

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00291 Published 2024-04-01 No fix listed CWE-89

Open these records in search →