A10 Thunder Adc vulnerabilities
4 known vulnerabilities affecting a10/thunder_adc.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-30368HIGHCVSS 8.8v6.0.2, build 682024-06-06
CVE-2024-30368 [HIGH] CWE-78 CVE-2024-30368: A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerabi
A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability.
The specific flaw exists within the CsrRequestView class. The issue results from the lack of p
cvelistv5nvd
CVE-2024-30369HIGHCVSS 7.8v6.0.2, build 682024-06-06
CVE-2024-30369 [HIGH] CWE-732 CVE-2024-30369: A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulne
A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw
cvelistv5nvd
CVE-2023-42130HIGHCVSS 8.8vvThunder 5.2.1-p3, build 702024-05-03
CVE-2023-42130 [HIGH] CWE-22 CVE-2023-42130: A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. T
A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability.
The specific flaw exists within the FileMgmtExport class. The issue resu
cvelistv5nvd
CVE-2023-42129MEDIUMCVSS 6.5v5.2.1-p3, build 702024-05-03
CVE-2023-42129 [MEDIUM] CWE-22 CVE-2023-42129: A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This
A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability.
The specific flaw exists within the ShowTechDownloadView class. The issue re
cvelistv5nvd