PatchTheCVECVE-2024-47253: In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with
CVE-2024-47253 is a high-severity flaw (CVSS 7.2) affecting access commander. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege roles.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.2 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 1.0% (top 39%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2024-11-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-47253?
access commander: upgrade to newer than 3.1.1.2. Exact commands for each OS are on this page.
Is CVE-2024-47253 being exploited?
CVE-2024-47253 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-47253 affect?
CVE-2024-47253 affects access commander. Severity is high (CVSS 7.2). In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerab
How urgent is CVE-2024-47253?
Priority 41/100. High severity
Related CVEs
- CVE-2025-59787 MEDIUM 6.5 UPGRADE 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when
- CVE-2025-59786 CRITICAL 9.8 UPGRADE 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session c
- CVE-2025-59785 HIGH 7.2 UPGRADE Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass
- CVE-2025-59784 HIGH 7.2 UPGRADE 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution
- CVE-2025-59783 HIGH 7.2 UPGRADE API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input val