Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-30242: SQL Injection in NS-ASG v6.3 /admin/add_ikev2.php

CVE-2023-30242 · published 3 years ago

Summary

A SQL injection flaw exists in the NS-ASG v6.3's /admin/add_ikev2.php component. This vulnerability could allow unauthorized access to sensitive data if an attacker exploits it. To protect against this risk, update to the latest version of NS-ASG.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
netentsec	application_security_gateway	6.3 `cpe:2.3:a:netentsec:application_security_gateway:6.3:::::::*`

Original advisory text

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.

References

https://gist.github.com/nsvizp/ccbc51253a47d79d2bc1ea72e01bdaf6 Third Party Advisory
https://www.netentsec.com/ Product

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published5 May 2023

Updated4 Nov 2026

First seen5 Jul 2026

Sources

CVE-2023-30242 · NVD

CVE-2023-30242 · MITRE

Track software like this

Free during beta