Action not permitted
Modal body text goes here.
Modal Title
Modal Body
ghsa-rwfw-fp96-gm62
Vulnerability from github
Published
2024-11-22 04:25
Modified
2024-11-22 04:25
Severity ?
Details
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
{ affected: [], aliases: [ "CVE-2024-39290", ], database_specific: { cwe_ids: [ "CWE-522", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2024-11-22T02:15:20Z", severity: "MODERATE", }, details: "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.", id: "GHSA-rwfw-fp96-gm62", modified: "2024-11-22T04:25:03Z", published: "2024-11-22T04:25:03Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-39290", }, { type: "WEB", url: "https://jvn.jp/en/jp/JVN41397971", }, { type: "WEB", url: "https://www.aiphone.net/important/20241016_1", }, { type: "WEB", url: "https://www.aiphone.net/important/20241016_2", }, { type: "WEB", url: "https://www.aiphone.net/support/software-documents/ix", }, { type: "WEB", url: "https://www.aiphone.net/support/software-documents/ixg", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", type: "CVSS_V3", }, ], }
cve-2024-39290
Vulnerability from cvelistv5
Published
2024-11-22 00:11
Modified
2024-11-22 11:34
Severity ?
EPSS score ?
Summary
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | AIPHONE CO., LTD. | IX-MV |
Version: firmware Ver.7.10 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-39290", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-11-22T11:29:20.295390Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-22T11:34:09.606Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "IX-MV", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-HB", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-HBT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-HW", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-HWT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-HW-JP", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-B", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-BT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-W", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-MV7-WT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DAU", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DB", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DBT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-EA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-EAT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-EAU", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DV", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVF", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVF-P", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVF-L", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVM", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-DU", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVF-RA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-DVF-2RA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-BA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-BAU", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-BB", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-BBT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-FA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-SSA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-SS-2G", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-SS-2GT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-SS-2G-N", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-BU", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-SSA-RA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-SSA-2RA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.11 and earlier", }, ], }, { product: "IX-RS-B", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-RS-BT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-RS-W", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-RS-WT", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IXW-MA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IX-SPMIC", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.7.10 and earlier", }, ], }, { product: "IXG-2C7", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.01 and earlier", }, ], }, { product: "IXG-2C7-L", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.01 and earlier", }, ], }, { product: "IXG-DM7", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, { product: "IXG-DM7-HID", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, { product: "IXG-DM7-HIDA", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, { product: "IXG-DM7-10K", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, { product: "IXG-MK", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, { product: "IXGW-GW", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.01 and earlier", }, ], }, { product: "IXGW-TGW", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.01 and earlier", }, ], }, { product: "IXGW-LC", vendor: "AIPHONE CO., LTD.", versions: [ { status: "affected", version: "firmware Ver.3.00 and earlier", }, ], }, ], descriptions: [ { lang: "en", value: "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.", }, ], metrics: [ { cvssV3_0: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, format: "CVSS", scenarios: [ { lang: "en-US", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-522", description: "Insufficiently protected credentials", lang: "en-US", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-11-22T00:11:56.742Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://www.aiphone.net/important/20241016_1/", }, { url: "https://www.aiphone.net/important/20241016_2/", }, { url: "https://www.aiphone.net/support/software-documents/ix/", }, { url: "https://www.aiphone.net/support/software-documents/ixg/", }, { url: "https://jvn.jp/en/jp/JVN41397971/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2024-39290", datePublished: "2024-11-22T00:11:56.742Z", dateReserved: "2024-09-26T01:39:38.784Z", dateUpdated: "2024-11-22T11:34:09.606Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.