10

CVE-2020-24384

A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x (including and after 3.2.2), 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x, and 5.0.x are affected.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
A10networks ≫ Agalaxy Version >= 3.2.1 <= 3.2.4
A10networks ≫ Agalaxy Version >= 5.0.1 < 5.0.5
A10networks ≫ Agalaxy Version3.0.1
A10networks ≫ Agalaxy Version3.0.4 Updatep3
A10networks ≫ Agalaxy Version5.0.5 Update-
A10networks ≫ Advanced Core Operating System Version3.2.2 Update-
A10networks ≫ Advanced Core Operating System Version3.2.2 Updatep8
A10networks ≫ Advanced Core Operating System Version3.2.3 Update-
A10networks ≫ Advanced Core Operating System Version3.2.3 Updatep5
A10networks ≫ Advanced Core Operating System Version3.2.4 Update-
A10networks ≫ Advanced Core Operating System Version3.2.4 Updatep5
A10networks ≫ Advanced Core Operating System Version3.2.5 Update-
A10networks ≫ Advanced Core Operating System Version3.2.5 Updatep1
A10networks ≫ Advanced Core Operating System Version4.0.0 Update-
A10networks ≫ Advanced Core Operating System Version4.0.1 Updatep3
A10networks ≫ Advanced Core Operating System Version4.1.0 Update-
A10networks ≫ Advanced Core Operating System Version4.1.0 Updatep13
A10networks ≫ Advanced Core Operating System Version4.1.1 Update-
A10networks ≫ Advanced Core Operating System Version4.1.1 Updatep13 Editionsp1
A10networks ≫ Advanced Core Operating System Version4.1.2 Update-
A10networks ≫ Advanced Core Operating System Version4.1.2 Updatep5 Editionsp1
A10networks ≫ Advanced Core Operating System Version4.1.4 Update-
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p4 Editionsp1
A10networks ≫ Advanced Core Operating System Version4.1.100 Update-
A10networks ≫ Advanced Core Operating System Version4.1.100 Updatep7
A10networks ≫ Advanced Core Operating System Version5.1.0 Update-
A10networks ≫ Advanced Core Operating System Version5.1.0 Updatep3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.64% 0.894
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C