2N kayıtları
2n üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %55,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-117 Improper Output Neutralization for Logs1
- CWE-1286 Improper Validation of Syntactic Correctness of Input1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-295 Improper Certificate Validation1
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-613 Insufficient Session Expiration1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2025-59783İstismar yok | OS Command Injection over API2n · access commander · CWE-78 | Yüksek8,8 | — | %0,9 | 4 Mar 2026 |
31İzleyin | CVE-2024-47255İstismar yok | In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitr2n · access commander · CWE-354 | Yüksek7,8 | — | %0,1 | 5 Kas 2024 |
28İzleyin | CVE-2024-47253İstismar yok | In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to 2n · access commander · CWE-22 | Yüksek7,2 | — | %1,0 | 5 Kas 2024 |
28İzleyin | CVE-2024-47254İstismar yok | In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker 2n · access commander · CWE-807 | Yüksek7,2 | — | %0,4 | 5 Kas 2024 |
27İzleyin | CVE-2025-59784İstismar yok | Log Pollution - Control Characters Not Escaped2n · access commander · CWE-117 | Orta6,9 | — | %0,3 | 4 Mar 2026 |
24İzleyin | CVE-2025-59786İstismar yok | Cookies are not Invalidated upon Logout and Password Change2n · access commander · CWE-613 | Orta6,0 | — | %0,3 | 4 Mar 2026 |
23İzleyin | CVE-2021-31399İstismar yok | On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.2n · access unit 2.0 firmware · CWE-295 | Orta5,9 | — | %0,8 | 13 Ağu 2021 |
21İzleyin | CVE-2025-59787İstismar yok | HTTP 5XX Internal Server Errors2n · access commander · CWE-703 | Orta5,3 | — | %0,2 | 4 Mar 2026 |
21İzleyin | CVE-2025-59785İstismar yok | API - Insufficient Input Validation2n · access commander · CWE-1286 | Orta5,3 | — | %0,2 | 4 Mar 2026 |
- CVE-2025-5978335İzleyin
OS Command Injection over API
YüksekCVSS 8,8İstismar yokEPSS %12n · access commander4 Mar 2026
- CVE-2024-4725531İzleyin
In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitr
YüksekCVSS 7,8İstismar yokEPSS %02n · access commander5 Kas 2024
- CVE-2024-4725328İzleyin
In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to
YüksekCVSS 7,2İstismar yokEPSS %12n · access commander5 Kas 2024
- CVE-2024-4725428İzleyin
In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker
YüksekCVSS 7,2İstismar yokEPSS %02n · access commander5 Kas 2024
- CVE-2025-5978427İzleyin
Log Pollution - Control Characters Not Escaped
OrtaCVSS 6,9İstismar yokEPSS %02n · access commander4 Mar 2026
- CVE-2025-5978624İzleyin
Cookies are not Invalidated upon Logout and Password Change
OrtaCVSS 6,0İstismar yokEPSS %02n · access commander4 Mar 2026
- CVE-2021-3139923İzleyin
On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack.
OrtaCVSS 5,9İstismar yokEPSS %12n · access unit 2.0 firmware13 Ağu 2021
- CVE-2025-5978721İzleyin
HTTP 5XX Internal Server Errors
OrtaCVSS 5,3İstismar yokEPSS %02n · access commander4 Mar 2026
- CVE-2025-5978521İzleyin
API - Insufficient Input Validation
OrtaCVSS 5,3İstismar yokEPSS %02n · access commander4 Mar 2026