2N Access Commander Versions 3.1.1.2 and Prior Vulnerable to Path Traversal Attacks

CVE-2024-47253

What is CVE-2024-47253?

In versions of 2N Access Commander up to and including 3.1.1.2, a Path Traversal vulnerability exists that could potentially allow an attacker with administrative privileges to write files anywhere on the filesystem. This poses a significant risk as it enables the possibility of arbitrary remote code execution. However, this vulnerability is not exploitable by users with lower privilege roles, thereby limiting its scope of impact to those with administrative capabilities.

References