Filtered by vendor Netentsec Subscriptions
Filtered by product Application Security Gateway Firmware Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-28521 1 Netentsec 2 Application Security Gateway Firmware, Ns-asg 2025-06-17 7.8 High
SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component.
CVE-2023-7161 1 Netentsec 2 Application Security Gateway, Application Security Gateway Firmware 2024-11-21 7.3 High
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249183.