CVE-2024-30369

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Incorrect Permission Assignment for Critical Resource pada a10networks advanced core operating system. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the installer. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-22754.

Rincian

Terbit di NVD

6 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.a10networks.com/support/security_advisory/cve-2024-30368-cve-2024-30369 advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-24-525/ advisory pihak ketiga · vdb entry