CVE-2024-2647

Summary

CVE-2024-2647 is a critical vulnerability found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability allows for SQL injection through the manipulation of the loginId argument in the /admin/singlelogin.php file. The attack can be initiated remotely, posing a potential danger to organizations using this product. The exploit has been publicly disclosed and may be used by attackers. Remediation measures have not been provided, and the vendor has not responded to the disclosure of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.