What’s Vulnerable › Vulnerabilities

CVE-2024-39290

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-22 · updated 2026-06-17
• Weakness: CWE-522

Description

Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.

Affected products

• AIPHONE CO., LTD. IX-BA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-BU: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DU: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DV: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-2RA: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-L: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-P: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVF-RA: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-DVM: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-DVT: through firmware Ver.7.11
• AIPHONE CO., LTD. IX-EA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-EAT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-EAU: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-FA: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-B: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-BT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HB: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HBT: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HW: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HW-JP: through firmware Ver.7.10
• AIPHONE CO., LTD. IX-MV7-HWT: through firmware Ver.7.10

References

• https://jvn.jp/en/jp/JVN41397971/
• https://www.aiphone.net/important/20241016_1/
• https://www.aiphone.net/important/20241016_2/
• https://www.aiphone.net/support/software-documents/ix/
• https://www.aiphone.net/support/software-documents/ixg/

Get alerted when CVE-2024-39290 or the next vulnerability affects your stack