SQL Injection Vulnerability in Netentsec NS-ASG Application Security Gateway

CVE-2024-5772

What is CVE-2024-5772?

A significant SQL injection vulnerability has been identified in Netentsec's NS-ASG Application Security Gateway, particularly within the processing of the file /protocol/iscuser/deleteiscuser.php. This vulnerability arises when an attacker manipulates the argument 'messagecontent', enabling unauthorized SQL commands to be executed on the backend database. The implications include potential data leaks and unauthorized alterations to the data stored in the affected database. Attackers can exploit this vulnerability remotely, which raises serious concerns for users of the NS-ASG Application Security Gateway 6.3. Despite early disclosure efforts, Netentsec has not responded regarding mitigation strategies, making it imperative for users to assess and secure their systems proactively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References