Most recent entries from all

EUVD-2026-265257

fkie_cve-2024-47256

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older.

2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.

GHSA-c3j7-hfc5-cvhx

ICSA-24-319-17 — 2N Access Commander (Update A)

In 2N Access Commander Versions 3.1.1.2 and prior, a path traversal vulnerability could allow an attacker to write files on the filesystem to achieve arbitrary remote code execution. In 2N Access Commander Versions 3.1.1.2 and prior, an insufficient verification of data authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system. In 2N Access Commander Versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system, which could allow for arbitrary code execution with root permissions. In 2N Access Commander Versions 1.14 and prior, an attacker, who needs to have administrative access privileges, can read hardcoded AES passphrases, which may be used for decryption of certain data within backup files of 2N Access Commander Version 1.14 and older.