Vulnerability Identifier

CVE-2024-3456

2024-04-08

Severity Assessment

6.3

MEDIUM

CVSS v3.x Score

Clinical Analysis (Description)

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259712.

Vector Sequencing

Attack Parameters

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Impact Consequences

Technical Impact

Unchanged

Scope

Low

Confidentiality

Low

Integrity

Low

Availability

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2 Score (Legacy)

6.5

For backward compatibility

EPSS Probability

0.04%

Percentile: 11.6%

Weakness Classification

CWE-CWE-89

View CWE Details ↗

Affected Population

Affected Configurations

Total: 1 detected entries

Software List Scrollable

application_security_gateway

Vendor: netentsec • v6.3

Timeline

Time Line

PUBLICATION

08 Apr 2024

MODIFICATION

07 Feb 2025

Impact Statistics

Key Metrics

CVSS Score

6.3

MEDIUM

Products

Affected

Articles

Published

Remediation Protocol

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.

Sources & Bibliography

NIST NVD MITRE CVE External Reference ↗ External Reference ↗ External Reference ↗ External Reference ↗ External Reference ↗

CVE Vulnerabilities

Posts & Pages