A10networks Advanced Core Operating System — known CVE vulnerabilities

Every CVE whose affected-product data names A10networks Advanced Core Operating System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2020-24384 — CVSS 9.8 (critical): A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability…
• CVE-2023-42130 — CVSS 8.8 (high): A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulnerability allows remote…
• CVE-2024-30368 — CVSS 8.8 (high): A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2024-30369 — CVSS 7.8 (high): A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to…
• CVE-2018-5390 — CVSS 7.5 (high): Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every…
• CVE-2023-42129 — CVSS 6.5 (medium): A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers…
• CVE-2016-10213 — CVSS 5.9 (medium): A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote…
• CVE-2014-3976 — CVSS 5.0 (medium): Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers…