Netentsec Application Security Gateway Firmware 6.3.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:netentsec:application_security_gateway_firmware:6.3.1:*:*:*:*:*:*:*

part: o version: 6.3.1 update: *

VendorNetentsec (35c6ee8a-173f-5f88-8526-1e532b39cb67)
ProductApplication Security Gateway Firmware (3a65e6fe-f10a-5e62-8a38-4085069a12fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28521 vulnerable 2026-06-08 06:33:27.027649 Details available
SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component.
Published: 2024-03-21T00:00:00.000Z
Updated: 2024-08-28T14:28:06.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7161 vulnerable 2026-06-08 06:21:57.160603 Netentsec NS-ASG Application Security Gateway Login sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249183.
Published: 2023-12-29T08:00:05.846Z
Updated: 2024-08-02T08:50:08.192Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.