ByteOS Network

NVD Vulnerability Details :

CVE-2024-23843

Deferred

Source-vuln@krcert.or.kr

Published At-28 Oct, 2024 | 02:15

Updated At-15 Apr, 2026 | 00:35

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTS(Revision 125558), from 5.0.0 LTS through 5.0.56 LTS(Revision 125560).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	2.2	LOW	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 2.2

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-89	Secondary	vuln@krcert.or.kr

CWE ID: CWE-89

Type: Secondary

Source: vuln@krcert.or.kr

References

Hyperlink	Source	Resource
https://docs.genians.com/release/ko/advisories/GN-SA-2024-001.html	vuln@krcert.or.kr	N/A

Hyperlink: https://docs.genians.com/release/ko/advisories/GN-SA-2024-001.html

Source: vuln@krcert.or.kr

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History