Auth bypass in Nsfocus Secgate3600 Firewall
CVE-2023-7308
SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure vulnerability in the /cgi-bin/authUser/authManageSet.cgi endpoint. The affected component fails to enforce authentication checks on POST requests to retrieve user data. An unauthenticated remote attacker can exploit this flaw to obtain sensitive information, including user identifiers and configuration details, by sending crafted requests to the vulnerable endpoint. An affected version range is undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-06-18 UTC.
Vulnerability class: Broken Authentication
EPSS: 0.071 (93.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (Exploit, exploit)
- disclosure@vulncheck.com (Product, product)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2023-7308?
- CVE-2023-7308 is a high-severity vulnerability in Nsfocus Secgate3600 Firewall, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2025-08-27.
- How severe is CVE-2023-7308?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2023-7308 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.