Vulnerability · Published Nov 22, 2024 · Assigned by jpcert
CVE-2024-45837
Medium 5.4
In plain English
A medium-severity security flaw in IX-BA from AIPHONE CO., LTD.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.0)5.4Medium
Exploit odds (30 days)0.3%top 73.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AIPHONE CO., LTD. | IX-MV | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-MV7-HB | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-HBT | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-HW | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-HWT | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-HW-JP | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-B | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-BT | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-W | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-MV7-WT | firmware Ver.7.31 and earlier |
| AIPHONE CO., LTD. | IX-DA | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DAU | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DB | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DBT | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-EA | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-EAT | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-EAU | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DV | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVT | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVF | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVF-P | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVF-L | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVM | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DU | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVF-RA | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-DVF-2RA | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-BA | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-BAU | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-BB | firmware Ver.7.30 and earlier |
| AIPHONE CO., LTD. | IX-BBT | firmware Ver.7.30 and earlier |
Weakness: CWE-321 · Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N