PT-2025-5853 · 2N · 2N Os

Published 2025-02-06 · Updated 2025-02-06 · CVE-2024-13416

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions 2N OS (affected versions not specified)

Description The issue allows an authorized user to enable logging when using the API in the 2N OS device. This logging functionality discloses valid authentication tokens in the system log.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-13416

Affected Products

2N Os

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-13416 · Security Note
• https://twitter.com/CVEnew/status/1887583249154621473 · Twitter Post
• https://2n.com/en-GB/download/cve_2024_1341x_2nos_2_46_v1pdf · Note
• https://t.me/cvedetector/17430 · Telegram Post