All the vulnerabilites related to AIPHONE CO., LTD. - IX-SupportTool
jvndb-2024-000106
Vulnerability from jvndb
Published
2024-10-21 11:58
Modified
2024-11-21 11:37
Severity ?
Summary
Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
Details
AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.
IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.
<ul>
<li><b>OS command injection (CWE-78)</b> - CVE-2024-31408</li>
<li><b>Insufficiently protected credentials (CWE-522)</b> - CVE-2024-39290</li>
<li><b>Use of hard-coded cryptographic key (CWE-321)</b> - CVE-2024-45837</li>
<li><b>Improper access control (CWE-522)</b> - CVE-2024-47142</li>
</ul>
Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated.
After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.
References
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"dc:date": "2024-11-21T11:37+09:00",
"dcterms:issued": "2024-10-21T11:58+09:00",
"dcterms:modified": "2024-11-21T11:37+09:00",
"description": "AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.\r\nIX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\t\u003cli\u003e\u003cb\u003eOS command injection (CWE-78)\u003c/b\u003e - CVE-2024-31408\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eInsufficiently protected credentials (CWE-522)\u003c/b\u003e - CVE-2024-39290\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eUse of hard-coded cryptographic key (CWE-321)\u003c/b\u003e - CVE-2024-45837\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eImproper access control (CWE-522)\u003c/b\u003e - CVE-2024-47142\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nVera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated.\r\nAfter the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"sec:cpe": [
{
"#text": "cpe:/a:aiphone:ix-supporttool",
"@product": "IX-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/a:aiphone:ixg-supporttool",
"@product": "IXG-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bau_firmware",
"@product": "IX-BAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ba_firmware",
"@product": "IX-BA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bbt_firmware",
"@product": "IX-BBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bb_firmware",
"@product": "IX-BB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bu_firmware",
"@product": "IX-BU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dau_firmware",
"@product": "IX-DAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-da_firmware",
"@product": "IX-DA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dbt_firmware",
"@product": "IX-DBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-db_firmware",
"@product": "IX-DB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-du_firmware",
"@product": "IX-DU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-2ra_firmware",
"@product": "IX-DVF-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-l_firmware",
"@product": "IX-DVF-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-p_firmware",
"@product": "IX-DVF-P",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-ra_firmware",
"@product": "IX-DVF-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf_firmware",
"@product": "IX-DVF",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvm_firmware",
"@product": "IX-DVM",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvt_firmware",
"@product": "IX-DVT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dv_firmware",
"@product": "IX-DV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eat_firmware",
"@product": "IX-EAT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eau_firmware",
"@product": "IX-EAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ea_firmware",
"@product": "IX-EA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-fa_firmware",
"@product": "IX-FA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-bt_firmware",
"@product": "IX-MV7-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-b_firmware",
"@product": "IX-MV7-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hbt_firmware",
"@product": "IX-MV7-HBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hb_firmware",
"@product": "IX-MV7-HB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw-jp_firmware",
"@product": "IX-MV7-HW-JP",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hwt_firmware",
"@product": "IX-MV7-HWT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw_firmware",
"@product": "IX-MV7-HW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-wt_firmware",
"@product": "IX-MV7-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-w_firmware",
"@product": "IX-MV7-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv_firmware",
"@product": "IX-MV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-bt_firmware",
"@product": "IX-RS-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-b_firmware",
"@product": "IX-RS-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-wt_firmware",
"@product": "IX-RS-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-w_firmware",
"@product": "IX-RS-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-spmic_firmware",
"@product": "IX-SPMIC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g-n_firmware",
"@product": "IX-SS-2G-N",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2gt_firmware",
"@product": "IX-SS-2GT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g_firmware",
"@product": "IX-SS-2G",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-2ra_firmware",
"@product": "IX-SSA-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-ra_firmware",
"@product": "IX-SSA-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa_firmware",
"@product": "IX-SSA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7-l_firmware",
"@product": "IXG-2C7-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7_firmware",
"@product": "IXG-2C7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-10k_firmware",
"@product": "IXG-DM7-10K",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hida_firmware",
"@product": "IXG-DM7-HIDA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hid_firmware",
"@product": "IXG-DM7-HID",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7_firmware",
"@product": "IXG-DM7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-mk_firmware",
"@product": "IXG-MK",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-gw_firmware",
"@product": "IXGW-GW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-lc_firmware",
"@product": "IXGW-LC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-tgw_firmware",
"@product": "IXGW-TGW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixw-ma_firmware",
"@product": "IXW-MA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "8.0",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-000106",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN41397971/index.html",
"@id": "JVN#41397971",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-31408",
"@id": "CVE-2024-31408",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-39290",
"@id": "CVE-2024-39290",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-45837",
"@id": "CVE-2024-45837",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-47142",
"@id": "CVE-2024-47142",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-78",
"@title": "OS Command Injection(CWE-78)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software"
}
cve-2024-45837
Vulnerability from cvelistv5
Published
2024-11-22 00:13
Modified
2024-11-22 11:34
Severity ?
EPSS score ?
Summary
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | AIPHONE CO., LTD. | IX-MV |
Version: firmware Ver.7.30 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-45837",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T11:29:16.723191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T11:34:09.427Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "IX-MV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-MV7-HB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HWT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-HW-JP",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-MV7-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.31 and earlier"
}
]
},
{
"product": "IX-DA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-EAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DV",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-P",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVM",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-DVF-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BAU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BB",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BBT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-FA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2GT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SS-2G-N",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-BU",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SSA-2RA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-B",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-BT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-W",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-RS-WT",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXW-MA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IX-SPMIC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.7.30 and earlier"
}
]
},
{
"product": "IXG-2C7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-2C7-L",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXG-DM7",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HID",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-HIDA",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-DM7-10K",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXG-MK",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IXGW-GW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-TGW",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.01 and earlier"
}
]
},
{
"product": "IXGW-LC",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "firmware Ver.3.00 and earlier"
}
]
},
{
"product": "IX-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.10.3.0.0 and earlier"
}
]
},
{
"product": "IXG-SupportTool",
"vendor": "AIPHONE CO., LTD.",
"versions": [
{
"status": "affected",
"version": "Ver.5.0.2.0 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-321",
"description": "Use of hard-coded cryptographic key",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T00:13:01.908Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.aiphone.net/important/20241016_1/"
},
{
"url": "https://www.aiphone.net/important/20241016_2/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ix/"
},
{
"url": "https://www.aiphone.net/support/software-documents/ixg/"
},
{
"url": "https://jvn.jp/en/jp/JVN41397971/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-45837",
"datePublished": "2024-11-22T00:13:01.908Z",
"dateReserved": "2024-09-26T01:39:36.313Z",
"dateUpdated": "2024-11-22T11:34:09.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}