CVE-2024-3040

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258429 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-list_crl_conf.mdExploit
• https://vuldb.com/?ctiid.258429Permissions Required, VDB Entry
• https://vuldb.com/?id.258429Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.302340Third Party Advisory
• https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-list_crl_conf.mdExploit
• https://vuldb.com/?ctiid.258429Permissions Required, VDB Entry
• https://vuldb.com/?id.258429Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.302340Third Party Advisory

Published

Mar 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30391A Missing Authentication for Critical Function vulnerability…6.3
• CVE-2024-30392A Stack-based Buffer Overflow vulnerability in Flow Processi…8.7
• CVE-2024-30394A Stack-based Buffer Overflow vulnerability in the Routing P…8.7
• CVE-2024-30395An Improper Validation of Specified Type of Input vulnerabil…8.7
• CVE-2024-30397An Improper Check for Unusual or Exceptional Conditions vuln…8.7
• CVE-2024-30398An Improper Restriction of Operations within the Bounds of a…8.7
• CVE-2024-30401An Out-of-bounds Read vulnerability in the advanced forwardi…8.2
• CVE-2024-30402An Improper Check for Unusual or Exceptional Conditions vuln…5.3
• CVE-2024-30403A NULL Pointer Dereference vulnerability in the Packet Forwa…7.1
• CVE-2024-30405An Incorrect Calculation of Buffer Size vulnerability in Jun…8.7
• CVE-2024-30406A Cleartext Storage in a File on Disk vulnerability in Junip…6.7
• CVE-2024-30407The Use of a Hard-coded Cryptographic Key vulnerability in J…9.2