CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-47258: 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N...

8.1 CVSS

Description

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices.

Classification

CVE ID: CVE-2024-47258

CVSS Base Severity: HIGH

CVSS Base Score: 8.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor: 2N

Product: 2N Access Commander

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.87% (scored less or equal to compared to others)

EPSS Date: 2025-03-07 (when was this score calculated)

References

https://www.2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf

Timeline