CVE-2023-30242

CriticalCVSS 9.8

Published: 05/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

NS-ASG v6.3 was found to have a SQL injection vulnerability in the /admin/add_ikev2.php script. An attacker can exploit this flaw to manipulate database queries.

Risk Assessment

The risk includes unauthorized access to sensitive data, modification or deletion of data, potentially compromising system confidentiality and integrity.

Recommendation

Immediately update NS-ASG to the latest version that fixes this vulnerability and implement parameterized SQL queries in the application code.

Original NVD description (English source)

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.