Read the docs

A10

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

A10 records in CISA KEV

No A10 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Advanced Core Operating System · all components

Priority HIGH 71

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71767 Published 2018-08-06 Partial fix CWE-400
TI-2024-20105 CVE-2024-30368 · GHSA-3h5p-pg4g-m6gv

OS command injection in A10 Thunder ADC

Priority MEDIUM 46

A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03016 Published 2024-06-06 No fix listed CWE-78
TI-2023-22498 CVE-2023-42130 · GHSA-8f57-mjm2-427q

Path traversal in A10 Thunder ADC

Priority MEDIUM 42

A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02147 Published 2024-05-03 No fix listed CWE-22
Priority LOW 36

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00263 Published 2024-06-06 No fix listed CWE-732
Priority LOW 36

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a lo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11646 Published 2014-06-05 No fix listed CWE-119
TI-2023-22497 CVE-2023-42129 · GHSA-g53j-w72m-r73h

Path traversal in A10 Thunder ADC

Priority LOW 34

A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02479 Published 2024-05-03 No fix listed CWE-22
Priority LOW 30

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused non…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02058 Published 2017-02-08 No fix listed CWE-200
Open these records in search →