CVE-2024-30369: A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability
A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of A10 Thunder ADC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the installer. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-22754.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30369?
CVE-2024-30369 is classified as a local privilege escalation vulnerability which can allow attackers to gain elevated permissions on A10 Thunder ADC devices.
How do I fix CVE-2024-30369?
To mitigate CVE-2024-30369, it is recommended to apply the security patches provided by A10 Networks for affected versions of the Advanced Core Operating System.
What versions are affected by CVE-2024-30369?
CVE-2024-30369 affects several versions of A10 Networks Advanced Core Operating System, including 4.1.4 and multiple 5.x and 6.x series versions.
Can CVE-2024-30369 be exploited remotely?
No, CVE-2024-30369 requires local access to the system for exploitation, as an attacker must execute low-privileged code first.
What are the potential impacts of CVE-2024-30369?
Exploitation of CVE-2024-30369 can lead to unauthorized privilege escalation, allowing attackers to perform actions with elevated permissions on the affected systems.