ICSA-24-319-17

icsaUScisa_csaf_ot

2N Access Commander (Update A)

Advisory ansehen veröffentlicht 2024-11-14

Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges, execute arbitrary code, or gain root access to the system.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-47256US—OT erhöht—
Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption…
CVE-2024-47255UShigh7.8OT erhöht—
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permission…
CVE-2024-47254UShigh7.2OT erhöht—
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain r…
CVE-2024-47253UShigh7.2—
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potent…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan