A10networks

9 CVEs across 4 A10networks products. Browse A10networks vulnerabilities, severities, and proof-of-concept exploits.

A10networks products with known CVEs

ProductCVEs
Advanced Core Operating System8
Thunder Application Delivery Controller2
Acos Web Application Firewall1
Agalaxy1
A10networks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-30369High7.82024-06-06A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a…
CVE-2024-30368High8.82024-06-06A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a…
CVE-2023-42130High8.82024-05-03A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulnerability allows remote attackers to read and delet…
CVE-2023-42129Medium6.52024-05-03A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive…
CVE-2020-24384Critical9.82020-11-10A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability that could be used…
CVE-2018-15904Critical9.82018-08-27A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles t…
CVE-2018-5390High7.52018-08-06Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can…
CVE-2016-10213Medium5.92017-02-08A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the…
CVE-2014-39762014-06-05Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of…