CVE-2014-3976
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1...
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
- Record
CVE-2014-3976- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
- Record
CVE-2014-3976- Updated
- 2026-11-02
EUVDEUVD-2014-3909 No score
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2014-3909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2mvr-x656-xc89 No score
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1...
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
- Record
GHSA-2mvr-x656-xc89- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC) | 2014-04-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3976 is a medium vulnerability (CVSS 5.0) in A10networks Advanced Core Operating System, published June 5, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.6%, the 96th percentile. No source names a fixed version.
References
packetstormsecurity.com/files/125979/A10-Networks-ACOS-2.7.0-P2-Buffer-Overflow.html
exploit-db.com/exploits/32702
seclists.org/fulldisclosure/2014/Apr/16
securityfocus.com/bid/66588
osvdb.org/show/osvdb/105354
quantumleap.it/a10-networks-remote-buffer-overflow-softax
secunia.com/advisories/57640
nvd.nist.gov/vuln/detail/CVE-2014-3976
github.com/advisories/GHSA-2mvr-x656-xc89