CVE-2024-47142

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-22 · updated 2026-06-17
Weakness: CWE-522

Description

AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently protected credentials, which may allow a network-adjacent authenticated attacker to perform unintended operations.

Affected products

AIPHONE CO., LTD. IXG-2C7: through firmware Ver.2.03
AIPHONE CO., LTD. IXG-2C7-L: through firmware Ver.2.03

References

https://jvn.jp/en/jp/JVN41397971/
https://www.aiphone.net/important/20241016_2/
https://www.aiphone.net/support/software-documents/ixg/

Get alerted when CVE-2024-47142 or the next vulnerability affects your stack