CVE-2024-47256CWE-321

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may…

Medium · published February 6, 2025

CVSS v3.1
6.0
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older.

2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.3th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2025-02-06T19:10Z
EPSS history
Timeline
  • 06 FEB 19:10Z
    Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may…
    cvelistv5