Skip to content
OpenAdvisories
High ICSA-24-319-17 4 CVEs

2N Access Commander (Update A)

Published Nov 14, 2024 · Updated Feb 11, 2025 · Revision 2

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges, execute arbitrary code, or gain root access to the system.

Vulnerabilities 4

  • High 7.2

    In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administ…

  • Medium 6.3

    In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability coul…

  • Medium 6.0

    Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to re…

  • Medium 4.7

    In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which c…

Revision history

  1. #2

    Update A - Adding new vulnerability, affected products, and updating mitigations

  2. #1

    Initial Publication

References