CVE-2024-2022
CRITICALCVSS v3
9.8
CRITICAL
EPSS Score
83.9%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255301 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Technical Details
- Published
- 3/1/2024
Frequently Asked Questions
What is CVE-2024-2022?
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255301 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Is CVE-2024-2022 actively exploited?
Active exploitation of CVE-2024-2022 has not been confirmed. The EPSS score is 83.9%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-2022?
CVE-2024-2022 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2024-2022 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.