What is CVE-2024-30368?

CVE-2024-30368 is a high-severity vulnerability in A10 Thunder Adc, classified under OS Command Injection. CVSS score: 8.8/10. Published 2024-06-06.

How severe is CVE-2024-30368?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in A10 Thunder Adc

CVE-2024-30368

A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of A10 Thunder ADC. Authentication is required to exploit…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.030 (86.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

A10 Thunder Adc — versions 6.0.2, build 68
A10networks Advanced_core_operating_system — versions 4.1.4, 5.1.0, 5.2.0

Weakness classification (CWE)

References

zdi-disclosures@trendmicro.com (x_research-advisory, VDB Entry, Third Party Advisory)
zdi-disclosures@trendmicro.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-30368?: CVE-2024-30368 is a high-severity vulnerability in A10 Thunder Adc, classified under OS Command Injection. CVSS score: 8.8/10. Published 2024-06-06.
How severe is CVE-2024-30368?: High severity. CVSS v3 base score is 8.8 out of 10.