CVE-2023-3792

Published: Jul 20, 2023Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/test_status.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (1)

Products: Netentsec: Application Security Gateway

1 product

Application Security Gateway

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netentsec Application Security Gateway	Version 6.3

Related CWEs

Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

References (6)

https://github.com/CYN521/cve/blob/main/NS-ASG.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.235059

Source: cna@vuldb.com

Third Party Advisory

https://vuldb.com/?id.235059

Source: cna@vuldb.com

Third Party Advisory

https://github.com/CYN521/cve/blob/main/NS-ASG.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.235059

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vuldb.com/?id.235059

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.