What’s Vulnerable › Vulnerabilities

CVE-2024-45837

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-22 · updated 2026-06-17
• Weakness: CWE-321

Description

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.

Affected products

• AIPHONE CO., LTD. IX-BA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-BAU: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-BB: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-BBT: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-BU: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DAU: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DB: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DBT: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DU: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DV: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVF: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVF-2RA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVF-L: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVF-P: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVF-RA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVM: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-DVT: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-EA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-EAT: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-EAU: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-FA: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-MV: through firmware Ver.7.30
• AIPHONE CO., LTD. IX-MV7-B: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-BT: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-HB: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-HBT: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-HW: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-HW-JP: through firmware Ver.7.31
• AIPHONE CO., LTD. IX-MV7-HWT: through firmware Ver.7.31

References

• https://jvn.jp/en/jp/JVN41397971/
• https://www.aiphone.net/important/20241016_1/
• https://www.aiphone.net/important/20241016_2/
• https://www.aiphone.net/support/software-documents/ix/
• https://www.aiphone.net/support/software-documents/ixg/

Get alerted when CVE-2024-45837 or the next vulnerability affects your stack