| Assigner | jpcert |
| Reserved | 2024-09-26 |
| Published | 2024-11-22 |
| Updated | 2024-11-22 |
Description
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
| MEDIUM: 5.4 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Product status
firmware Ver.7.30 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.31 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.7.30 and earlier
affected
firmware Ver.3.01 and earlier
affected
firmware Ver.3.01 and earlier
affected
firmware Ver.3.00 and earlier
affected
firmware Ver.3.00 and earlier
affected
firmware Ver.3.00 and earlier
affected
firmware Ver.3.00 and earlier
affected
firmware Ver.3.00 and earlier
affected
firmware Ver.3.01 and earlier
affected
firmware Ver.3.01 and earlier
affected
firmware Ver.3.00 and earlier
affected
Ver.10.3.0.0 and earlier
affected
Ver.5.0.2.0 and earlier
affected
References
https://www.aiphone.net/important/20241016_1/
https://www.aiphone.net/important/20241016_2/
https://www.aiphone.net/support/software-documents/ix/
https://www.aiphone.net/support/software-documents/ixg/
https://jvn.jp/en/jp/JVN41397971/
cve.org CVE-2024-45837
nvd.nist.gov CVE-2024-45837
Download JSON
Share this page
https://cve.threatint.com/CVE/CVE-2024-45837
Subscribe to our newsletter to learn more about our work.
