7.8

CVE-2024-30369

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the installer. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-22754.

Data is provided by the National Vulnerability Database (NVD)
A10networks ≫ Advanced Core Operating System Version4.1.4 Update-
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p1
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p10
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p11
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p12
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p13
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p2
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p3
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p4
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p5
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p6
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p7
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p8
A10networks ≫ Advanced Core Operating System Version4.1.4 Updategr1-p9
A10networks ≫ Advanced Core Operating System Version4.1.4 Updatep1
A10networks ≫ Advanced Core Operating System Version4.1.4 Updatep2
A10networks ≫ Advanced Core Operating System Version4.1.4 Updatep3
A10networks ≫ Advanced Core Operating System Version5.1.0 Update-
A10networks ≫ Advanced Core Operating System Version5.1.0 Updatep3
A10networks ≫ Advanced Core Operating System Version5.1.0 Updatep4
A10networks ≫ Advanced Core Operating System Version5.1.0 Updatep5
A10networks ≫ Advanced Core Operating System Version5.1.0 Updatep6
A10networks ≫ Advanced Core Operating System Version5.2.0 Update-
A10networks ≫ Advanced Core Operating System Version5.2.0 Updatep1
A10networks ≫ Advanced Core Operating System Version5.2.1 Update-
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep1
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep2
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep3
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep4
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep5
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep6
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep7
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep8
A10networks ≫ Advanced Core Operating System Version5.2.1 Updatep9
A10networks ≫ Advanced Core Operating System Version6.0.0 Update-
A10networks ≫ Advanced Core Operating System Version6.0.0 Updatep1
A10networks ≫ Advanced Core Operating System Version6.0.0 Updatep2
A10networks ≫ Advanced Core Operating System Version6.0.0 Updatep2-sp1
A10networks ≫ Advanced Core Operating System Version6.0.2 Update-
A10networks ≫ Advanced Core Operating System Version6.0.2 Updatep1
A10networks ≫ Advanced Core Operating System Version6.0.3 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.08
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
zdi-disclosures@trendmicro.com 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.