Skip to content
OpenAdvisories
High · 7.8 CVE-2024-28521 EUVD-2024-25618GHSA-h8hf-rwc6-9296

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and ob…

Published Mar 21, 2024 · Updated Aug 28, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component.

References