All the vulnerabilites related to AIPHONE CO., LTD. - IX-DVF-L
cve-2024-45837
Vulnerability from cvelistv5
Published
2024-11-22 00:13
Modified
2024-11-22 11:34
Summary
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Impacted products
Vendor Product Version
AIPHONE CO., LTD. IX-MV7-HB Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-HBT Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-HW Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-HWT Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-HW-JP Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-B Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-BT Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-W Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-MV7-WT Version: firmware Ver.7.31 and earlier
AIPHONE CO., LTD. IX-DA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DAU Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DB Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DBT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-EA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-EAT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-EAU Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DV Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVF Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVF-P Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVF-L Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVM Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DU Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVF-RA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-DVF-2RA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-BA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-BAU Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-BB Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-BBT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-FA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SSA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SS-2G Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SS-2GT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SS-2G-N Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-BU Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SSA-RA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SSA-2RA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-RS-B Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-RS-BT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-RS-W Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-RS-WT Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IXW-MA Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IX-SPMIC Version: firmware Ver.7.30 and earlier
AIPHONE CO., LTD. IXG-2C7 Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-2C7-L Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-DM7 Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HID Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HIDA Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-10K Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-MK Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXGW-GW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-TGW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-LC Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IX-SupportTool Version: Ver.10.3.0.0 and earlier
AIPHONE CO., LTD. IXG-SupportTool Version: Ver.5.0.2.0 and earlier
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-45837",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T11:29:16.723191Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T11:34:09.427Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IX-MV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HWT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW-JP",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.31 and earlier"
            }
          ]
        },
        {
          "product": "IX-DA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-EA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-P",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVM",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-BA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-BAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-BB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-BBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-FA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2GT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G-N",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-BU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IXW-MA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IX-SPMIC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.30 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HID",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HIDA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-10K",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-MK",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-GW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-TGW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-LC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IX-SupportTool",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.10.3.0.0 and earlier"
            }
          ]
        },
        {
          "product": "IXG-SupportTool",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.5.0.2.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-321",
              "description": "Use of hard-coded cryptographic key",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T00:13:01.908Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.aiphone.net/important/20241016_1/"
        },
        {
          "url": "https://www.aiphone.net/important/20241016_2/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ix/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ixg/"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN41397971/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-45837",
    "datePublished": "2024-11-22T00:13:01.908Z",
    "dateReserved": "2024-09-26T01:39:36.313Z",
    "dateUpdated": "2024-11-22T11:34:09.427Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-31408
Vulnerability from cvelistv5
Published
2024-11-22 00:10
Modified
2024-12-05 20:44
Summary
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Impacted products
Vendor Product Version
AIPHONE CO., LTD. IX-MV7-HB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HW Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HWT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HW-JP Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-B Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-BT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-W Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-WT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EAT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DV Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVT Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-P Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-L Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVM Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DU Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-2RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-BA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-FA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SSA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SS-2G Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SS-2GT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SS-2G-N Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BU Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SSA-RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SSA-2RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-RS-B Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-BT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-W Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-WT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IXW-MA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SPMIC Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IXG-2C7 Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-2C7-L Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-DM7 Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HID Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HIDA Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-10K Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-MK Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXGW-GW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-TGW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-LC Version: firmware Ver.3.00 and earlier
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-31408",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-05T20:39:22.522031Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-05T20:44:27.398Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IX-MV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HWT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW-JP",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-P",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVM",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-BA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-FA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2GT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G-N",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IXW-MA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SPMIC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HID",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HIDA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-10K",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-MK",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-GW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-TGW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-LC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T00:10:50.954Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.aiphone.net/important/20241016_1/"
        },
        {
          "url": "https://www.aiphone.net/important/20241016_2/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ix/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ixg/"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN41397971/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-31408",
    "datePublished": "2024-11-22T00:10:50.954Z",
    "dateReserved": "2024-09-26T01:39:39.689Z",
    "dateUpdated": "2024-12-05T20:44:27.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2024-39290
Vulnerability from cvelistv5
Published
2024-11-22 00:11
Modified
2024-11-22 11:34
Summary
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Impacted products
Vendor Product Version
AIPHONE CO., LTD. IX-MV7-HB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HW Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HWT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-HW-JP Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-B Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-BT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-W Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-MV7-WT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EAT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-EAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DV Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVT Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-P Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-L Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVM Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-DU Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-DVF-2RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-BA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BAU Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BB Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BBT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-FA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SSA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SS-2G Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SS-2GT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SS-2G-N Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-BU Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SSA-RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-SSA-2RA Version: firmware Ver.7.11 and earlier
AIPHONE CO., LTD. IX-RS-B Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-BT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-W Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-RS-WT Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IXW-MA Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IX-SPMIC Version: firmware Ver.7.10 and earlier
AIPHONE CO., LTD. IXG-2C7 Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-2C7-L Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXG-DM7 Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HID Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-HIDA Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-DM7-10K Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXG-MK Version: firmware Ver.3.00 and earlier
AIPHONE CO., LTD. IXGW-GW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-TGW Version: firmware Ver.3.01 and earlier
AIPHONE CO., LTD. IXGW-LC Version: firmware Ver.3.00 and earlier
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-39290",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T11:29:20.295390Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T11:34:09.606Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IX-MV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HWT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-HW-JP",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-MV7-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-EAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DV",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-P",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVM",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-DU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-DVF-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-BA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BAU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BB",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BBT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-FA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2GT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SS-2G-N",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-BU",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-SSA-2RA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.11 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-B",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-BT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-W",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-RS-WT",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IXW-MA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IX-SPMIC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.7.10 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-2C7-L",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HID",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-HIDA",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-DM7-10K",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXG-MK",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-GW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-TGW",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.01 and earlier"
            }
          ]
        },
        {
          "product": "IXGW-LC",
          "vendor": "AIPHONE CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "firmware Ver.3.00 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "Insufficiently protected credentials",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T00:11:56.742Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.aiphone.net/important/20241016_1/"
        },
        {
          "url": "https://www.aiphone.net/important/20241016_2/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ix/"
        },
        {
          "url": "https://www.aiphone.net/support/software-documents/ixg/"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN41397971/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-39290",
    "datePublished": "2024-11-22T00:11:56.742Z",
    "dateReserved": "2024-09-26T01:39:38.784Z",
    "dateUpdated": "2024-11-22T11:34:09.606Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

jvndb-2024-000106
Vulnerability from jvndb
Published
2024-10-21 11:58
Modified
2024-11-21 11:37
Severity ?
Summary
Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
Details
AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. <ul> <li><b>OS command injection (CWE-78)</b> - CVE-2024-31408</li> <li><b>Insufficiently protected credentials (CWE-522)</b> - CVE-2024-39290</li> <li><b>Use of hard-coded cryptographic key (CWE-321)</b> - CVE-2024-45837</li> <li><b>Improper access control (CWE-522)</b> - CVE-2024-47142</li> </ul> Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
  "dc:date": "2024-11-21T11:37+09:00",
  "dcterms:issued": "2024-10-21T11:58+09:00",
  "dcterms:modified": "2024-11-21T11:37+09:00",
  "description": "AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.\r\nIX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\t\u003cli\u003e\u003cb\u003eOS command injection (CWE-78)\u003c/b\u003e - CVE-2024-31408\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eInsufficiently protected credentials (CWE-522)\u003c/b\u003e - CVE-2024-39290\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eUse of hard-coded cryptographic key (CWE-321)\u003c/b\u003e - CVE-2024-45837\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eImproper access control (CWE-522)\u003c/b\u003e - CVE-2024-47142\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nVera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated.\r\nAfter the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:aiphone:ix-supporttool",
      "@product": "IX-SupportTool",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:aiphone:ixg-supporttool",
      "@product": "IXG-SupportTool",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-bau_firmware",
      "@product": "IX-BAU",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ba_firmware",
      "@product": "IX-BA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-bbt_firmware",
      "@product": "IX-BBT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-bb_firmware",
      "@product": "IX-BB",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-bu_firmware",
      "@product": "IX-BU",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dau_firmware",
      "@product": "IX-DAU",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-da_firmware",
      "@product": "IX-DA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dbt_firmware",
      "@product": "IX-DBT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-db_firmware",
      "@product": "IX-DB",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-du_firmware",
      "@product": "IX-DU",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvf-2ra_firmware",
      "@product": "IX-DVF-2RA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvf-l_firmware",
      "@product": "IX-DVF-L",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvf-p_firmware",
      "@product": "IX-DVF-P",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvf-ra_firmware",
      "@product": "IX-DVF-RA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvf_firmware",
      "@product": "IX-DVF",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvm_firmware",
      "@product": "IX-DVM",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dvt_firmware",
      "@product": "IX-DVT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-dv_firmware",
      "@product": "IX-DV",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-eat_firmware",
      "@product": "IX-EAT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-eau_firmware",
      "@product": "IX-EAU",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ea_firmware",
      "@product": "IX-EA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-fa_firmware",
      "@product": "IX-FA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-bt_firmware",
      "@product": "IX-MV7-BT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-b_firmware",
      "@product": "IX-MV7-B",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-hbt_firmware",
      "@product": "IX-MV7-HBT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-hb_firmware",
      "@product": "IX-MV7-HB",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-hw-jp_firmware",
      "@product": "IX-MV7-HW-JP",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-hwt_firmware",
      "@product": "IX-MV7-HWT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-hw_firmware",
      "@product": "IX-MV7-HW",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-wt_firmware",
      "@product": "IX-MV7-WT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv7-w_firmware",
      "@product": "IX-MV7-W",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-mv_firmware",
      "@product": "IX-MV",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-rs-bt_firmware",
      "@product": "IX-RS-BT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-rs-b_firmware",
      "@product": "IX-RS-B",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-rs-wt_firmware",
      "@product": "IX-RS-WT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-rs-w_firmware",
      "@product": "IX-RS-W",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-spmic_firmware",
      "@product": "IX-SPMIC",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ss-2g-n_firmware",
      "@product": "IX-SS-2G-N",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ss-2gt_firmware",
      "@product": "IX-SS-2GT",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ss-2g_firmware",
      "@product": "IX-SS-2G",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ssa-2ra_firmware",
      "@product": "IX-SSA-2RA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ssa-ra_firmware",
      "@product": "IX-SSA-RA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ix-ssa_firmware",
      "@product": "IX-SSA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-2c7-l_firmware",
      "@product": "IXG-2C7-L",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-2c7_firmware",
      "@product": "IXG-2C7",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-dm7-10k_firmware",
      "@product": "IXG-DM7-10K",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-dm7-hida_firmware",
      "@product": "IXG-DM7-HIDA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-dm7-hid_firmware",
      "@product": "IXG-DM7-HID",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-dm7_firmware",
      "@product": "IXG-DM7",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixg-mk_firmware",
      "@product": "IXG-MK",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixgw-gw_firmware",
      "@product": "IXGW-GW",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixgw-lc_firmware",
      "@product": "IXGW-LC",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixgw-tgw_firmware",
      "@product": "IXGW-TGW",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:aiphone:ixw-ma_firmware",
      "@product": "IXW-MA",
      "@vendor": "AIPHONE CO., LTD.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "8.0",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-000106",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN41397971/index.html",
      "@id": "JVN#41397971",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-31408",
      "@id": "CVE-2024-31408",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-39290",
      "@id": "CVE-2024-39290",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-45837",
      "@id": "CVE-2024-45837",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-47142",
      "@id": "CVE-2024-47142",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-78",
      "@title": "OS Command Injection(CWE-78)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software"
}