PT-2023-26187 · Beijing Netcon · Ns-Asg

Cyn521 · Published 2023-07-20 · Updated 2024-05-17 · CVE-2023-3792

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Beijing Netcon NS-ASG version 6.3

Description A problematic issue has been found in the software, affecting an unknown part of the file /admin/test status.php. The manipulation of this issue leads to a direct request. The details of this issue have been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.

Recommendations For version 6.3, consider restricting access to the /admin/test status.php file until a fix is available. As a temporary workaround, avoid using the file /admin/test status.php to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2023-3792

Affected Products

Ns-Asg

References · 6

• 🔥 https://github.com/CYN521/cve/blob/main/NS-ASG.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3792 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3792 · Vendor Advisory
• https://vuldb.com/?ctiid.235059 · Note
• https://t.me/cvenotify/54797 · Telegram Post
• https://vuldb.com/?id.235059 · Note