a10networks records

9 published records for vendor a10networks.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 11.1%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
CWE-732 Incorrect Permission Assignment for Critical Resource1
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
52Plan	CVE-2018-5390No exploit	Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can linux · linux kernel · CWE-400 Pre-auth Denial of service	High7.5	—	71.7%	Aug 6, 2018
40Plan	CVE-2020-24384No exploit	A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability a10networks · agalaxy pre-auth RCE	Critical9.8	—	3.5%	Nov 10, 2020
39Monitor	CVE-2018-15904No exploit	A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.a10networks · acos web application firewall · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	Aug 27, 2018
36Monitor	CVE-2024-30368No exploit	A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerabilitya10networks · advanced core operating system · CWE-78 RCE Command injection	High8.8	—	3.0%	Jun 6, 2024
36Monitor	CVE-2023-42130No exploit	A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerabilitya10networks · advanced core operating system · CWE-22 Path traversal	High8.8	—	2.1%	May 2, 2024
31Monitor	CVE-2024-30369No exploit	A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitya10networks · advanced core operating system · CWE-732 RCE Local privilege escalation	High7.8	—	0.2%	Jun 6, 2024
27Monitor	CVE-2023-42129No exploit	A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerabilitya10networks · advanced core operating system · CWE-22 Path traversal	Medium6.5	—	2.4%	May 2, 2024
24Monitor	CVE-2016-10213No exploit	A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attaa10networks · advanced core operating system · CWE-200 Pre-auth Info leak	Medium5.9	—	2.0%	Feb 8, 2017
23Monitor	CVE-2014-3976Proof of concept	Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers ta10networks · advanced core operating system · CWE-119 pre-auth RCE Memory safety Denial of service	Medium5.0	—	11.6%	Jun 5, 2014

CVE-2018-5390
52Plan
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can
HighCVSS 7.5No exploitEPSS 71%
- Pre-auth
- Denial of service
linux · linux kernelAug 6, 2018
CVE-2020-24384
40Plan
A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
a10networks · agalaxyNov 10, 2020
CVE-2018-15904
39Monitor
A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
a10networks · acos web application firewallAug 27, 2018
CVE-2024-30368
36Monitor
A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Command injection
a10networks · advanced core operating systemJun 6, 2024
CVE-2023-42130
36Monitor
A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- Path traversal
a10networks · advanced core operating systemMay 2, 2024
CVE-2024-30369
31Monitor
A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
a10networks · advanced core operating systemJun 6, 2024
CVE-2023-42129
27Monitor
A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 2%
- Path traversal
a10networks · advanced core operating systemMay 2, 2024
CVE-2016-10213
24Monitor
A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote atta
MediumCVSS 5.9No exploitEPSS 2%
- Pre-auth
- Info leak
a10networks · advanced core operating systemFeb 8, 2017
CVE-2014-3976
23Monitor
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers t
MediumCVSS 5.0Proof of conceptEPSS 11%
a10networks · advanced core operating systemJun 5, 2014