CVE-2023-30806

Name of the Vulnerable Software and Affected Versions Sangfor Next-Gen Application Firewall version NGAF8.0.17

Description The Sangfor Next-Gen Application Firewall is affected by an operating system command injection issue. A remote, unauthenticated attacker can execute arbitrary commands by sending a specially crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to improper handling of shell meta-characters within the PHPSESSID cookie. The vulnerability allows for remote code execution.

Recommendations Sangfor Next-Gen Application Firewall version NGAF8.0.17: At the moment, there is no information about a newer version that contains a fix for this vulnerability.