CVE-2024-47254CWE-807
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient
Verification of Data Authenticity vulnerability could allow an attacker
to escalate their…
Medium · published November 5, 2024
What it is
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient
Verification of Data Authenticity vulnerability could allow an attacker
to escalate their privileges and gain root access to the system.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00371 · 29.9th percentile
- Weakness
- CWE-807 · Reliance on Untrusted Inputs in a Security Decision
- Published
- 2024-11-05T09:13Z
EPSS history
Timeline