QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-47256

Back to search

CVE-2024-47256

Published: Feb 6, 2025

Modified: Jan 9, 2026

PUBLISHED

CVSS v3.1

6.0

MEDIUM

Description

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older. 2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version.

VendorProductVersions

2N

2N Access Commander

affected
2N Access Commander 1.14 and prior

Weaknesses (CWE)

CWE-321

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now