Aiphone Co., Ltd Ix-Dvf-2ra vulnerabilities

3 CVEs affecting Aiphone Co., Ltd Ix-Dvf-2ra, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45837, published 2024-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-31408, published 2024-11-22. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a…
CVE-2024-39290, published 2024-11-22. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password…
CVE-2024-45837, published 2024-11-22. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain…