CVE-2024-45837
5.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Summary
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-HB | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-HBT | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-HW | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-HWT | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-HW-JP | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-B | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-BT | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-W | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-MV7-WT | firmware Ver.7.31 and earlier | affected |
| AIPHONE CO., LTD. | IX-DA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DAU | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DB | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DBT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-EA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-EAT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-EAU | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DV | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVF | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVF-P | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVF-L | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVM | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DU | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVF-RA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-DVF-2RA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-BA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-BAU | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-BB | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-BBT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-FA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SSA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SS-2G | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SS-2GT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SS-2G-N | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-BU | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SSA-RA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SSA-2RA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-RS-B | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-RS-BT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-RS-W | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-RS-WT | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IXW-MA | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IX-SPMIC | firmware Ver.7.30 and earlier | affected |
| AIPHONE CO., LTD. | IXG-2C7 | firmware Ver.3.01 and earlier | affected |
| AIPHONE CO., LTD. | IXG-2C7-L | firmware Ver.3.01 and earlier | affected |
| AIPHONE CO., LTD. | IXG-DM7 | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IXG-DM7-HID | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IXG-DM7-HIDA | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IXG-DM7-10K | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IXG-MK | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IXGW-GW | firmware Ver.3.01 and earlier | affected |
| AIPHONE CO., LTD. | IXGW-TGW | firmware Ver.3.01 and earlier | affected |
| AIPHONE CO., LTD. | IXGW-LC | firmware Ver.3.00 and earlier | affected |
| AIPHONE CO., LTD. | IX-SupportTool | Ver.10.3.0.0 and earlier | affected |
| AIPHONE CO., LTD. | IXG-SupportTool | Ver.5.0.2.0 and earlier | affected |
Weaknesses
- CWE-321: Use of hard-coded cryptographic key
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://www.aiphone.net/important/20241016_1/
- https://www.aiphone.net/important/20241016_2/
- https://www.aiphone.net/support/software-documents/ix/
- https://www.aiphone.net/support/software-documents/ixg/
- https://jvn.jp/en/jp/JVN41397971/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.