{"id":"CVE-2025-59787","state":"PUBLISHED","title":"HTTP 5XX Internal Server Errors","description":"2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts.","publishedAt":"2026-03-04T15:31:59.211Z","updatedAt":"2026-03-05T19:01:31.814Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","source":"2N"},"assigner":"2N","products":["2N Telekomunikace a.s. 2N Access Commander"],"affected":[{"vendor":"2N Telekomunikace a.s.","product":"2N Access Commander","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.5","versionType":"Release"}],"platforms":["Linux"]}],"references":["https://www.2n.com/en-GB/download/cve_2025_59787_acom_3_5_v1pdf"],"weaknesses":["CWE-703"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/59xxx/CVE-2025-59787.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-59787","state":"PUBLISHED","datePublished":"2026-03-04T15:31:59.211Z","dateUpdated":"2026-03-05T19:01:31.814Z","assignerShortName":"2N","assignerOrgId":"be69f613-e5f6-419b-800c-30351aa8933c","dateReserved":"2025-09-19T17:22:49.648Z"},"containers":{"cna":{"title":"HTTP 5XX Internal Server Errors","descriptions":[{"lang":"en","value":"2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts."}],"affected":[{"vendor":"2N Telekomunikace a.s.","product":"2N Access Commander","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.5","versionType":"Release"}],"platforms":["Linux"]}],"references":[{"url":"https://www.2n.com/en-GB/download/cve_2025_59787_acom_3_5_v1pdf","tags":["vendor-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-703","description":"CWE-703 – Improper Check or Handling of Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"2N","orgId":"be69f613-e5f6-419b-800c-30351aa8933c","dateUpdated":"2026-03-04T15:31:59.211Z"},"impacts":[{"capecId":"CAPEC-248","descriptions":[{"lang":"en","value":"CAPEC-248 – Command/Argument Injection via Malformed Input"}]},{"capecId":"CAPEC-153","descriptions":[{"lang":"en","value":"CAPEC-153 – Input Data Manipulation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-05T19:00:54.958469Z","id":"CVE-2025-59787","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-05T19:01:31.814Z"}}]}}}