Vulnerability in 2n Access Commander
CVE-2024-47256
Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander…
EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N.
Affected products
- 2n Access Commander — versions 2N Access Commander 1.14 and prior
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-47256?
- CVE-2024-47256 is a medium-severity vulnerability in 2n Access Commander, classified under Use of Hard-coded Cryptographic Key. CVSS score: 6.0/10. Published 2025-02-06.
- How severe is CVE-2024-47256?
- Medium severity. CVSS v3 base score is 6.0 out of 10.
- Is CVE-2024-47256 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.