Netentsec Ns-asg_firmware

15 CVEs affecting Netentsec Ns-asg_firmware. Latest disclosed: 2024-04-01. Critical: 4, High: 6.

Top CVEs affecting Netentsec Ns-asg_firmware
CVESeverityScorePublishedSummary
CVE-2024-30867Critical9.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.
CVE-2024-30858Critical9.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.
CVE-2024-30865Critical9.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.
CVE-2024-30868Critical9.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.
CVE-2024-30862High8.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.
CVE-2024-30860High8.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.
CVE-2024-30859High8.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.
CVE-2024-30871High8.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.
CVE-2024-30870High8.82024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.
CVE-2023-40850High7.52023-09-13netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway.
CVE-2024-30863Medium6.32024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.
CVE-2024-30864Medium6.32024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.
CVE-2024-30866Medium5.42024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.
CVE-2024-30861Medium5.32024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.
CVE-2024-30872Medium5.12024-04-01netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.