Overview
- Description
- In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege roles.
- Source
- product-security@axis.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.2
- Impact score
- 5.9
- Exploitability score
- 1.2
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:2n:access_commander:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47A7B866-FF8F-4CA9-A34C-78D361E21730",
"versionEndIncluding": "3.1.1.2"
}
],
"operator": "OR"
}
]
}
]