Vulnerability Details CVE-2025-59783
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection.
This vulnerability can only be exploited after authenticating with administrator privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.4%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2025-59783
-
cpe:2.3:a:2n:access_commander:-
-
cpe:2.3:a:2n:access_commander:3.1.1.2