Detections
Analytics
NewStart CGSL MAIN 7.02 : nginx Multiple Vulnerabilities (NS-SA-2026-0104)
medium Nessus Plugin ID 343561
Synopsis
The remote NewStart CGSL host is affected by multiple vulnerabilities.Description
The remote NewStart CGSL host, running version MAIN 7.02, has nginx packages installed that are affected by multiple vulnerabilities:- When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. (CVE-2025-23419)
- NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method none, and (3) the authentication server returns the Auth-Wait response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. (CVE-2025-53859)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade the vulnerable CGSL nginx packages. Note that updated packages may not be available yet. Please contact ZTE for more information.See Also
https://security.gd-linux.com/info/CVE-2025-23419
Plugin Details
Severity: Medium
ID: 343561
File Name: newstart_cgsl_NS-SA-2026-0104_nginx.nasl
Version: 1.1
Type: Local
Published: 9/8/2026
Updated: 9/8/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.2
Percentile: 51.15
CVSS v2
Risk Factor: Medium
Base Score: 4
Temporal Score: 3
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N
CVSS Score Source: CVE-2025-23419
CVSS v3
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.8
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 6.3
Threat Score: 1.7
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2025-53859
Vulnerability Information
CPE: cpe:/o:zte:cgsl_main:7, p-cpe:/a:zte:cgsl_main:nginx-all-modules, p-cpe:/a:zte:cgsl_main:nginx-core, p-cpe:/a:zte:cgsl_main:nginx-doc, p-cpe:/a:zte:cgsl_main:nginx-filesystem, p-cpe:/a:zte:cgsl_main:nginx-mod-devel, p-cpe:/a:zte:cgsl_main:nginx-mod-http-image-filter, p-cpe:/a:zte:cgsl_main:nginx-mod-http-perl, p-cpe:/a:zte:cgsl_main:nginx-mod-http-xslt-filter, p-cpe:/a:zte:cgsl_main:nginx-mod-mail, p-cpe:/a:zte:cgsl_main:nginx-mod-stream, p-cpe:/a:zte:cgsl_main:nginx
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/ZTE-CGSL/release, Host/ZTE-CGSL/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 9/7/2026
Vulnerability Publication Date: 2/5/2025
Reference Information
CVE: CVE-2025-23419, CVE-2025-53859
IAVA: 2025-A-0086, 2025-A-0615