PT-2025-5860 · 2N · 2N Access Commander

Published 2025-02-06 · Updated 2025-02-21 · CVE-2024-47258

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions 2N Access Commander versions 2.1 and prior

Description The issue is related to a Man In The Middle attack due to the software not verifying certificates of 2N edge devices in default settings.

Recommendations For 2N Access Commander versions 2.1 and prior, consider updating the configuration to verify certificates of 2N edge devices to prevent Man In The Middle attacks. As a temporary workaround, restrict access to the default settings until a proper fix is applied.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-300

CWE-295

Related Identifiers

CVE-2024-47258

Affected Products

2N Access Commander

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-47258 · Security Note
• https://twitter.com/WhalersLtd/status/1887743704670097576 · Twitter Post
• https://2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf · Note
• https://t.me/cvenotify/111989 · Telegram Post
• https://t.me/cvedetector/17423 · Telegram Post
• https://twitter.com/CVEnew/status/1887583246587674964 · Twitter Post