CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md	Exploit Third Party Advisory
https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:netentsec:ns-asg_firmware:6.3:*:*:*:*:*:*:*

cpe:2.3:h:netentsec:ns-asg:-:*:*:*:*:*:*:*

History

04 Apr 2025, 15:45

Type	Values Removed	Values Added
References	~~() https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md -~~	() https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md - Exploit, Third Party Advisory
CPE		cpe:2.3:o:netentsec:ns-asg_firmware:6.3:::::::* cpe:2.3:h:netentsec:ns-asg:-:::::::*
First Time		Netentsec ns-asg Firmware Netentsec ns-asg Netentsec

21 Nov 2024, 09:12

Type	Values Removed	Values Added
References	~~() https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md -~~	() https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-index.md -

03 Jul 2024, 01:54

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
CWE		CWE-89

02 Apr 2024, 12:50

Type	Values Removed	Values Added
Summary		(es) netentsec NS-ASG 6.3 es vulnerable a la inyección SQL a través de /3g/index.php.

01 Apr 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-01 16:15

Updated : 2025-04-04 15:45

NVD link : CVE-2024-30862

Mitre link : CVE-2024-30862

CVE.ORG link : CVE-2024-30862

JSON object : View

Products Affected

netentsec

ns-asg_firmware
ns-asg

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

8.8 /10