JVNDB-2024-000106
Vulnerability from jvndb - Published: 2024-10-21 11:58 - Updated:2024-11-21 11:37
Severity ?
Summary
Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
Details
AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.
IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.
- OS command injection (CWE-78) - CVE-2024-31408
- Insufficiently protected credentials (CWE-522) - CVE-2024-39290
- Use of hard-coded cryptographic key (CWE-321) - CVE-2024-45837
- Improper access control (CWE-522) - CVE-2024-47142
References
Impacted products
| Vendor | Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"dc:date": "2024-11-21T11:37+09:00",
"dcterms:issued": "2024-10-21T11:58+09:00",
"dcterms:modified": "2024-11-21T11:37+09:00",
"description": "AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System.\r\nIX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below.\r\n\r\n\u003cul\u003e\r\n\t\u003cli\u003e\u003cb\u003eOS command injection (CWE-78)\u003c/b\u003e - CVE-2024-31408\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eInsufficiently protected credentials (CWE-522)\u003c/b\u003e - CVE-2024-39290\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eUse of hard-coded cryptographic key (CWE-321)\u003c/b\u003e - CVE-2024-45837\u003c/li\u003e\r\n\t\u003cli\u003e\u003cb\u003eImproper access control (CWE-522)\u003c/b\u003e - CVE-2024-47142\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nVera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated.\r\nAfter the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000106.html",
"sec:cpe": [
{
"#text": "cpe:/a:aiphone:ix-supporttool",
"@product": "IX-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/a:aiphone:ixg-supporttool",
"@product": "IXG-SupportTool",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bau_firmware",
"@product": "IX-BAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ba_firmware",
"@product": "IX-BA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bbt_firmware",
"@product": "IX-BBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bb_firmware",
"@product": "IX-BB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-bu_firmware",
"@product": "IX-BU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dau_firmware",
"@product": "IX-DAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-da_firmware",
"@product": "IX-DA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dbt_firmware",
"@product": "IX-DBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-db_firmware",
"@product": "IX-DB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-du_firmware",
"@product": "IX-DU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-2ra_firmware",
"@product": "IX-DVF-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-l_firmware",
"@product": "IX-DVF-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-p_firmware",
"@product": "IX-DVF-P",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf-ra_firmware",
"@product": "IX-DVF-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvf_firmware",
"@product": "IX-DVF",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvm_firmware",
"@product": "IX-DVM",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dvt_firmware",
"@product": "IX-DVT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-dv_firmware",
"@product": "IX-DV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eat_firmware",
"@product": "IX-EAT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-eau_firmware",
"@product": "IX-EAU",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ea_firmware",
"@product": "IX-EA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-fa_firmware",
"@product": "IX-FA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-bt_firmware",
"@product": "IX-MV7-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-b_firmware",
"@product": "IX-MV7-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hbt_firmware",
"@product": "IX-MV7-HBT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hb_firmware",
"@product": "IX-MV7-HB",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw-jp_firmware",
"@product": "IX-MV7-HW-JP",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hwt_firmware",
"@product": "IX-MV7-HWT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-hw_firmware",
"@product": "IX-MV7-HW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-wt_firmware",
"@product": "IX-MV7-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv7-w_firmware",
"@product": "IX-MV7-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-mv_firmware",
"@product": "IX-MV",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-bt_firmware",
"@product": "IX-RS-BT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-b_firmware",
"@product": "IX-RS-B",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-wt_firmware",
"@product": "IX-RS-WT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-rs-w_firmware",
"@product": "IX-RS-W",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-spmic_firmware",
"@product": "IX-SPMIC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g-n_firmware",
"@product": "IX-SS-2G-N",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2gt_firmware",
"@product": "IX-SS-2GT",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ss-2g_firmware",
"@product": "IX-SS-2G",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-2ra_firmware",
"@product": "IX-SSA-2RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa-ra_firmware",
"@product": "IX-SSA-RA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ix-ssa_firmware",
"@product": "IX-SSA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7-l_firmware",
"@product": "IXG-2C7-L",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-2c7_firmware",
"@product": "IXG-2C7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-10k_firmware",
"@product": "IXG-DM7-10K",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hida_firmware",
"@product": "IXG-DM7-HIDA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7-hid_firmware",
"@product": "IXG-DM7-HID",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-dm7_firmware",
"@product": "IXG-DM7",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixg-mk_firmware",
"@product": "IXG-MK",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-gw_firmware",
"@product": "IXGW-GW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-lc_firmware",
"@product": "IXGW-LC",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixgw-tgw_firmware",
"@product": "IXGW-TGW",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
},
{
"#text": "cpe:/o:aiphone:ixw-ma_firmware",
"@product": "IXW-MA",
"@vendor": "AIPHONE CO., LTD.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "8.0",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-000106",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN41397971/index.html",
"@id": "JVN#41397971",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-31408",
"@id": "CVE-2024-31408",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-39290",
"@id": "CVE-2024-39290",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-45837",
"@id": "CVE-2024-45837",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-47142",
"@id": "CVE-2024-47142",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-78",
"@title": "OS Command Injection(CWE-78)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…