CVE-2014-3976

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

11.65% chance of exploitation in the next 30 days, 96th percentile

Published

2014-06-05

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/32702

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32702

References

• CVE Record
• NVD entry

Related

• CVE-2014-3975
• CVE-2014-3977
• CVE-2014-3974
• CVE-2014-3978
• CVE-2014-3962
• CVE-2014-3990