Aiphone Co., Ltd Ix-Ea vulnerabilities

3 CVEs affecting Aiphone Co., Ltd Ix-Ea, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45837, published 2024-11-22.

More from Aiphone Co., Ltd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-31408, published 2024-11-22. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a…
• CVE-2024-39290, published 2024-11-22. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password…
• CVE-2024-45837, published 2024-11-22. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain…