Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Netentsec

First CVE: May 5, 2023Active for: 3 yearsTotal CVEs: 48
60.3
VTI Score
TOP TARGET

Netentsec develops application security gateway products, a focused but prominent portfolio that serves as a critical control point for web traffic and application access. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes across its flagship NS-ASG appliance and firmware, concentrating in injection-class weaknesses—SQL injection, code injection, XPath injection, and XML injection—that reflect the parser and query-evaluation demands of a gateway positioned to inspect and validate application-layer traffic. These weakness classes are characteristic of products that must handle untrusted input at scale and represent a durable structural risk for this product category. Defenders should treat Netentsec gateway advisories as high-priority and verify remediation across deployed instances, particularly where the appliance sits between users and sensitive applications; current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
48
Total CVEs
More Total CVEs than 98% of tracked vendors
6.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
8.7
Avg CVSS Score
Higher Avg CVSS Score than 83% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Netentsec over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 5, 2023
3 years ago
Most Recent CVE
Jun 15, 2024
769 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (48 CVEs).

48 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-2330CRITICAL
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. Th
Mar 9, 20249.846NOYES
CVE-2024-2022CRITICAL
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the
Mar 1, 20249.836NONO
CVE-2024-2021CRITICAL
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuse
Mar 1, 20249.832NONO
CVE-2023-30242CRITICAL
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.
May 5, 20239.832NONO
CVE-2024-3456CRITICAL
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /adm
Apr 8, 20249.830NONO
CVE-2024-2644CRITICAL
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pro
Mar 19, 20249.830NONO
CVE-2023-6903CRITICAL
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit
Dec 17, 20239.830NONO
CVE-2024-3040CRITICAL
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. Th
Mar 28, 20249.828NONO
CVE-2023-5700CRITICAL
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel
Oct 23, 20239.828NONO
CVE-2024-3458CRITICAL
A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The
Apr 8, 20249.827NONO
View all 48 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products48 CVEs
17%
25%
58%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (4.2%)
Network45 (93.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (2.1%)
Attack Complexity
Low47 (97.9%)
High1 (2.1%)
Unknown0 (0.0%)
User Interaction
None48 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low9 (18.8%)
High1 (2.1%)
None38 (79.2%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (48 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
2.1% of CVEs· 95th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Netentsec.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Netentsec — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Netentsec's Products

View all 2 CNAs →

Top CWEs