PT-2024-21379 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Dtxharry · Published 2024-03-19 · Updated 2025-01-30 · CVE-2024-2645

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netentsec NS-ASG Application Security Gateway version 6.3

Description A problematic issue has been found in the Netentsec NS-ASG Application Security Gateway. This issue affects an unknown part of the file "/vpnweb/resetpwd/resetpwd.php". The manipulation of the UserId argument leads to improper neutralization of data within xpath expressions. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations Netentsec NS-ASG Application Security Gateway version 6.3: Update the "/vpnweb/resetpwd/resetpwd.php" file to properly neutralize data within xpath expressions, specifically ensuring the UserId argument is handled securely to prevent remote attacks. As a temporary workaround, consider restricting access to the "/vpnweb/resetpwd/resetpwd.php" file until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-643

CWE-91

Related Identifiers

CVE-2024-2645

Affected Products

Netentsec Ns-Asg Application Security Gateway

References · 7

• 🔥 https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-laddfirewall.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-2645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2645 · Security Note
• https://twitter.com/CVEnew/status/1770218495042634219 · Twitter Post
• https://t.me/cvenotify/109171 · Telegram Post
• https://vuldb.com/?id.257283 · Note
• https://vuldb.com/?ctiid.257283 · Note