medium5.5
CVE-2023-5700
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3.
Impact
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243138 is the identifier assigned to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netentsec | Application Security Gateway | Version 6.3 |