Skip to content
OpenAdvisories

Product · Sangfor

Net-Gen Application Firewall

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-30806 EPSS 65%

    Sangfor Next-Gen Application Firewall PHPSESSID Command Injection

    The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/logi…

    Sangfor Net-Gen Application Firewall
  • Critical 9.8
    CVE-2023-30805 EPSS 65%

    Sangfor Next-Gen Application Firewall Login Un Param Command Injection

    The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php…

    Sangfor Net-Gen Application Firewall
  • Critical 9.8
    CVE-2023-30803 EPSS 21%

    Sangfor Next-Gen Application Firewall Authentication Bypass

    The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a craf…

    Sangfor Net-Gen Application Firewall