PatchTheCVECVE-2023-42129: A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability
CVE-2023-42129 is a medium-severity flaw (CVSS 6.5) affecting advanced core operating system. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability. The specific flaw exists within the ShowTechDownloadView class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operat
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 2.5% (top 15%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2024-05-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-42129?
advanced core operating system: upgrade to 5.2.1, 6.0.2. Exact commands for each OS are on this page.
Is CVE-2023-42129 being exploited?
CVE-2023-42129 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-42129 affect?
CVE-2023-42129 affects advanced core operating system. Severity is medium (CVSS 6.5). A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of A10 Thunder ADC. Authentication is requ
How urgent is CVE-2023-42129?
Priority 49/100. Public exploit reference
Related CVEs
- CVE-2024-30369 HIGH 7.8 MITIGATE A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2024-30368 HIGH 8.8 MITIGATE A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability
- CVE-2023-42130 HIGH 8.8 UPGRADE A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability