CVE-2024-47258

State: Published
Severity: 8.1 High
Published: Feb 6, 2025
Updated: Jan 9, 2026
Reserved: Sep 23, 2024

Description

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices.

2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2 of 2N Access Commander (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all customers update 2N Access Commander to the latest version and use one of two mentioned practices.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	Axis

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
2N Access Commander2N	2N Access Commander 2.1 and priorAffected

References

https://www.2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.