CVE-2023-30242

CRITICAL

Netentsec Application Security Gateway - SQL Injection

Title source: rule

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.

Core 3

Core References

Broken Link

Product

Third Party Advisory

CVSS v3 9.8

EPSS 0.0062

EPSS Percentile 45.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

CWE

CWE-89

Status published

Products (1)

netentsec/application_security_gateway 6.3

Published May 05, 2023

Tracked Since Feb 18, 2026