CVE-2016-10213: a10networks advanced_core_operating_system
Vulnerability summary
CVE-2016-10213 is a medium (CVSS 5.9) vulnerability in a10networks advanced_core_operating_system. EPSS estimates a 2.06% chance of exploitation in the next 30 days, higher than 81.3% of scored vulnerabilities.
Not severe (CVSS 5.9, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 08-02-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.06%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.06% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
A10networks1 product
1 vendor · 1 product
References
3 links- github.com/nonce-disrespect/nonce-disrespectX Refsource MISC
- www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerabilityX Refsource CONFIRM