2N Access Commander
Approved changes feed: RSS · Atom
cpe:2.3:a:2n:2n_access_commander:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | 2N (2d6c700f-e11a-57ef-9b72-4459361dd0a3) |
|---|---|
| Product | 2N Access Commander (2fcdb76e-ab87-5bfa-8050-9d53cd516046) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47258 |
vulnerable | 2026-06-08 06:48:11.629559 |
Details available
HIGH (8.1)
2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices.
2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2 of 2N Access Commander (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all customers update 2N Access Commander to the latest version and use one of two mentioned practices.
Published: 2025-02-06T19:10:40.660Z
Updated: 2026-01-09T13:31:36.477Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47256 |
vulnerable | 2026-06-08 06:48:11.626994 |
Details available
MEDIUM (6)
Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older.
2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.
Published: 2025-02-06T19:10:03.820Z
Updated: 2026-01-09T13:31:33.460Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47255 |
vulnerable | 2026-06-08 06:48:11.626753 |
Details available
MEDIUM (4.7)
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary
code execution with root permissions.
Published: 2024-11-05T09:16:48.128Z
Updated: 2026-01-09T13:31:35.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47254 |
vulnerable | 2026-06-08 06:48:11.626377 |
Details available
MEDIUM (6.3)
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient
Verification of Data Authenticity vulnerability could allow an attacker
to escalate their privileges and gain root access to the system.
Published: 2024-11-05T09:13:08.132Z
Updated: 2026-01-09T13:31:31.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47253 |
vulnerable | 2026-06-08 06:48:11.625795 |
Details available
HIGH (7.2)
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege roles.
Published: 2024-11-05T09:08:56.300Z
Updated: 2026-01-09T13:31:37.563Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.