Skip to content
OpenAdvisories
Medium WID-SEC-2024-1283 2 CVEs

A10 Networks ACOS: Mehrere Schwachstellen

Published Jun 3, 2024 · Updated Jun 3, 2024 · de-DE

Vendor: A10 Product: ACOS

Summary

Ein Angreifer kann mehrere Schwachstellen in A10 Networks ACOS ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.

Product

Advanced Core Operating System (ACOS) ist ein Betriebssystem, das für A10 Networks Geräte wie z. B. Router, Switches und Firewalls eingesetzt wird.

Vulnerabilities 2

  • High 7.8
    CVE-2024-30369

    A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-p…

    A10 Thunder ADC
  • High 7.2
    CVE-2024-30368

    A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability

    A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability. …

    A10 Thunder ADC

Revision history

  1. #1

    Initiale Fassung

References