Netentsec · Netentsec Ns-Asg Application Security Gateway · CVE-2024-3041
**Name of the Vulnerable Software and Affected Versions**
Netentsec NS-ASG Application Security Gateway version 6.3
**Description**
A critical issue has been found in the Netentsec NS-ASG Application Security Gateway, affecting unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For Netentsec NS-ASG Application Security Gateway version 6.3, as a temporary workaround, consider restricting access to the /protocol/log/listloginfo.php file until a patch is available. Additionally, restrict remote access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.