PatchTheCVECVE-2024-47254: In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerab
CVE-2024-47254 is a medium-severity flaw (CVSS 6.3) affecting access commander. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.3 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | High |
| Privileges needed | High |
| User interaction | Required |
| EPSS exploit chance | 0.4% (top 69%) |
| CISA exploited list | No |
| Weakness | CWE-807 |
| Published | 2024-11-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-47254?
access commander: upgrade to newer than 3.1.1.2. Exact commands for each OS are on this page.
Is CVE-2024-47254 being exploited?
CVE-2024-47254 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-47254 affect?
CVE-2024-47254 affects access commander. Severity is medium (CVSS 6.3). In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system.
How urgent is CVE-2024-47254?
Priority 30/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-59787 MEDIUM 6.5 UPGRADE 2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when
- CVE-2025-59786 CRITICAL 9.8 UPGRADE 2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session c
- CVE-2025-59785 HIGH 7.2 UPGRADE Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass
- CVE-2025-59784 HIGH 7.2 UPGRADE 2N Access Commander version 3.4.1 and prior is vulnerable to log pollution
- CVE-2025-59783 HIGH 7.2 UPGRADE API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input val