Search
Find a vulnerability
Search criteria
7 vulnerabilities found for IX-MV7-B by AIPHONE CO., LTD.
CVE-2024-45837 (GCVE-0-2024-45837)
Vulnerability from nvd – Published: 2024-11-22 00:13 – Updated: 2024-11-22 11:34
VLAI
Summary
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-321 - Use of hard-coded cryptographic key
Assigner
References
Impacted products
56 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IX-SupportTool |
Affected:
Ver.10.3.0.0 and earlier
|
|
| AIPHONE CO., LTD. | IXG-SupportTool |
Affected:
Ver.5.0.2.0 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-45837",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T11:29:16.723191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T11:34:09.427Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IX-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.10.3.0.0 and earlier"
}
]
},
{
"product": "IXG-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.5.0.2.0 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "Use of hard-coded cryptographic key",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:13:01.908Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-45837",
"datePublished": "2024-11-22T00:13:01.908Z",
"dateReserved": "2024-09-26T01:39:36.313Z",
"dateUpdated": "2024-11-22T11:34:09.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-39290 (GCVE-0-2024-39290)
Vulnerability from nvd – Published: 2024-11-22 00:11 – Updated: 2024-11-22 11:34
VLAI
Summary
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-522 - Insufficiently protected credentials
Assigner
References
Impacted products
54 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-39290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T11:29:20.295390Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T11:34:09.606Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "Insufficiently protected credentials",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:11:56.742Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-39290",
"datePublished": "2024-11-22T00:11:56.742Z",
"dateReserved": "2024-09-26T01:39:38.784Z",
"dateUpdated": "2024-11-22T11:34:09.606Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-31408 (GCVE-0-2024-31408)
Vulnerability from nvd – Published: 2024-11-22 00:10 – Updated: 2024-12-05 20:44
VLAI
Summary
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS Command Injection')
Assigner
References
Impacted products
54 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-31408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-05T20:39:22.522031Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-05T20:44:27.398Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:10:50.954Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-31408",
"datePublished": "2024-11-22T00:10:50.954Z",
"dateReserved": "2024-09-26T01:39:39.689Z",
"dateUpdated": "2024-12-05T20:44:27.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-45837 (GCVE-0-2024-45837)
Vulnerability from cvelistv5 – Published: 2024-11-22 00:13 – Updated: 2024-11-22 11:34
VLAI
Summary
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-321 - Use of hard-coded cryptographic key
Assigner
References
Impacted products
56 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.31 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.30 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IX-SupportTool |
Affected:
Ver.10.3.0.0 and earlier
|
|
| AIPHONE CO., LTD. | IXG-SupportTool |
Affected:
Ver.5.0.2.0 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-45837",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T11:29:16.723191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T11:34:09.427Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IX-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.10.3.0.0 and earlier"
}
]
},
{
"product": "IXG-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.5.0.2.0 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "Use of hard-coded cryptographic key",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:13:01.908Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-45837",
"datePublished": "2024-11-22T00:13:01.908Z",
"dateReserved": "2024-09-26T01:39:36.313Z",
"dateUpdated": "2024-11-22T11:34:09.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-39290 (GCVE-0-2024-39290)
Vulnerability from cvelistv5 – Published: 2024-11-22 00:11 – Updated: 2024-11-22 11:34
VLAI
Summary
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-522 - Insufficiently protected credentials
Assigner
References
Impacted products
54 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-39290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T11:29:20.295390Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T11:34:09.606Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "Insufficiently protected credentials",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:11:56.742Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-39290",
"datePublished": "2024-11-22T00:11:56.742Z",
"dateReserved": "2024-09-26T01:39:38.784Z",
"dateUpdated": "2024-11-22T11:34:09.606Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-31408 (GCVE-0-2024-31408)
Vulnerability from cvelistv5 – Published: 2024-11-22 00:10 – Updated: 2024-12-05 20:44
VLAI
Summary
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS Command Injection')
Assigner
References
Impacted products
54 products
| Vendor | Product | Version | |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HWT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-HW-JP |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-MV7-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-EAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DV |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVT |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-P |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-L |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVM |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-DU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-DVF-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-BA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BAU |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BB |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BBT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-FA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2GT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SS-2G-N |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-BU |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-SSA-2RA |
Affected:
firmware Ver.7.11 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-B |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-BT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-W |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-RS-WT |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXW-MA |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IX-SPMIC |
Affected:
firmware Ver.7.10 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7 |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-2C7-L |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7 |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HID |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-HIDA |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-DM7-10K |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXG-MK |
Affected:
firmware Ver.3.00 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-GW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-TGW |
Affected:
firmware Ver.3.01 and earlier
|
|
| AIPHONE CO., LTD. | IXGW-LC |
Affected:
firmware Ver.3.00 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-31408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-05T20:39:22.522031Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-05T20:44:27.398Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.11 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.10 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:10:50.954Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-31408",
"datePublished": "2024-11-22T00:10:50.954Z",
"dateReserved": "2024-09-26T01:39:39.689Z",
"dateUpdated": "2024-12-05T20:44:27.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
JVNDB-2024-000106
Vulnerability from jvndb - Published: 2024-10-21 11:58 - Updated:2024-11-21 11:37
Severity
Summary
Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
Details
AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.
IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.
- OS command injection (CWE-78) - CVE-2024-31408
- Insufficiently protected credentials (CWE-522) - CVE-2024-39290
- Use of hard-coded cryptographic key (CWE-321) - CVE-2024-45837
- Improper access control (CWE-522) - CVE-2024-47142
References
Impacted products
| Vendor | Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"dc:date": "2024-11-21T11:37+09:00",
"dcterms:issued": "2024-10-21T11:58+09:00",
"dcterms:modified": "2024-11-21T11:37+09:00",
"description": "AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.\r\nIX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\t\u003cli\u003e\u003cb\u003eOS command injection (CWE-78)\u003c/b\u003e - CVE-2024-31408\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eInsufficiently protected credentials (CWE-522)\u003c/b\u003e - CVE-2024-39290\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eUse of hard-coded cryptographic key (CWE-321)\u003c/b\u003e - CVE-2024-45837\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eImproper access control (CWE-522)\u003c/b\u003e - CVE-2024-47142\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nVera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated.\r\nAfter the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"sec:cpe": [
{
"#text": "cpe:/a:aiphone:ix-supporttool",
"@product": "IX-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/a:aiphone:ixg-supporttool",
"@product": "IXG-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bau_firmware",
"@product": "IX-BAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ba_firmware",
"@product": "IX-BA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bbt_firmware",
"@product": "IX-BBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bb_firmware",
"@product": "IX-BB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bu_firmware",
"@product": "IX-BU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dau_firmware",
"@product": "IX-DAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-da_firmware",
"@product": "IX-DA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dbt_firmware",
"@product": "IX-DBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-db_firmware",
"@product": "IX-DB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-du_firmware",
"@product": "IX-DU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-2ra_firmware",
"@product": "IX-DVF-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-l_firmware",
"@product": "IX-DVF-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-p_firmware",
"@product": "IX-DVF-P",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-ra_firmware",
"@product": "IX-DVF-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf_firmware",
"@product": "IX-DVF",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvm_firmware",
"@product": "IX-DVM",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvt_firmware",
"@product": "IX-DVT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dv_firmware",
"@product": "IX-DV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eat_firmware",
"@product": "IX-EAT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eau_firmware",
"@product": "IX-EAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ea_firmware",
"@product": "IX-EA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-fa_firmware",
"@product": "IX-FA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-bt_firmware",
"@product": "IX-MV7-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-b_firmware",
"@product": "IX-MV7-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hbt_firmware",
"@product": "IX-MV7-HBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hb_firmware",
"@product": "IX-MV7-HB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw-jp_firmware",
"@product": "IX-MV7-HW-JP",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hwt_firmware",
"@product": "IX-MV7-HWT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw_firmware",
"@product": "IX-MV7-HW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-wt_firmware",
"@product": "IX-MV7-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-w_firmware",
"@product": "IX-MV7-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv_firmware",
"@product": "IX-MV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-bt_firmware",
"@product": "IX-RS-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-b_firmware",
"@product": "IX-RS-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-wt_firmware",
"@product": "IX-RS-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-w_firmware",
"@product": "IX-RS-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-spmic_firmware",
"@product": "IX-SPMIC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g-n_firmware",
"@product": "IX-SS-2G-N",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2gt_firmware",
"@product": "IX-SS-2GT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g_firmware",
"@product": "IX-SS-2G",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-2ra_firmware",
"@product": "IX-SSA-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-ra_firmware",
"@product": "IX-SSA-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa_firmware",
"@product": "IX-SSA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7-l_firmware",
"@product": "IXG-2C7-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7_firmware",
"@product": "IXG-2C7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-10k_firmware",
"@product": "IXG-DM7-10K",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hida_firmware",
"@product": "IXG-DM7-HIDA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hid_firmware",
"@product": "IXG-DM7-HID",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7_firmware",
"@product": "IXG-DM7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-mk_firmware",
"@product": "IXG-MK",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-gw_firmware",
"@product": "IXGW-GW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-lc_firmware",
"@product": "IXGW-LC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-tgw_firmware",
"@product": "IXGW-TGW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixw-ma_firmware",
"@product": "IXW-MA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "8.0",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-000106",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN41397971/index.html",
"@id": "JVN#41397971",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-31408",
"@id": "CVE-2024-31408",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-39290",
"@id": "CVE-2024-39290",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-45837",
"@id": "CVE-2024-45837",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-47142",
"@id": "CVE-2024-47142",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-78",
"@title": "OS Command Injection(CWE-78)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software"
}