CVE-2024-47254 MEDIUM

CVE-2024-47254

Vendor 2N
Product 2N Access Commander
Weakness CWE-807
Published November 5, 2024
Last update January 9, 2026
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Adjacent
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system.

Key dates

02Disclosure timeline

November 5, 2024 CVE published
January 9, 2026 Record updated