CVE-2024-13416

MEDIUM

2N OS <= 2.45 - Authenticated Sensitive Information Disclosure in System Log

Title source: llm
STIX 2.1

Description

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log. 2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.

References (1)

Core 1

Scores

CVSS v3 4.3
EPSS 0.0033
EPSS Percentile 24.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-532
Status published
Products (1)
2N/2N OS All 2N products running 2N OS 2.45 and prior
Published Feb 06, 2025
Tracked Since Feb 18, 2026