What’s Vulnerable › Vulnerabilities

CVE-2024-31408

• Severity: high (CVSS 8.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-22 · updated 2026-06-17
• Weakness: CWE-78

Description

OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.

Affected products

• AIPHONE CO., LTD. IX-BA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BU: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DU: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DV: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-2RA: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-L: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-P: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-RA: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVM: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DVT: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-EA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-EAT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-EAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-FA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-B: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-BT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HW: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HW-JP: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HWT: through firmware Ver.7.10

References

• https://jvn.jp/en/jp/JVN41397971/
• https://www.aiphone.net/important/20241016_1/
• https://www.aiphone.net/important/20241016_2/
• https://www.aiphone.net/support/software-documents/ix/
• https://www.aiphone.net/support/software-documents/ixg/

Get alerted when CVE-2024-31408 or the next vulnerability affects your stack