RULE(RULE ID:338682)

Rule General Information
Release Date: 2025-02-11
Rule Name: Sangfor NGAF login.cgi Remote Command Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Sangfor NGAF login.cgi interface has a command injection vulnerability. An attacker can execute any operating system command on the server through this vulnerability to obtain the server permissions.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.