What’s Vulnerable › Vulnerabilities

CVE-2016-10213

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-08 · updated 2026-06-17
• Weakness: CWE-200

Description

A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging a reused nonce in a session and a "forbidden attack," a similar issue to CVE-2016-0270.

Affected products

• A10Networks Advanced Core Operating System: through 2.7.2

References

• http://www.securityfocus.com/bid/96163
• https://github.com/nonce-disrespect/nonce-disrespect
• https://www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerability
• http://www.securityfocus.com/bid/96163
• https://github.com/nonce-disrespect/nonce-disrespect
• https://www.a10networks.com/blog/cve-2016-0270-gcm-nonce-vulnerability

Get alerted when CVE-2016-10213 or the next vulnerability affects your stack