CVE-2024-47142

Published: Nov 22, 2024Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.1 / Impact: 3.4

Source: vultures@jpcert.or.jp (Secondary)

Description

AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently protected credentials, which may allow a network-adjacent authenticated attacker to perform unintended operations.

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (3)

https://jvn.jp/en/jp/JVN41397971/

Source: vultures@jpcert.or.jp

https://www.aiphone.net/important/20241016_2/

Source: vultures@jpcert.or.jp

https://www.aiphone.net/support/software-documents/ixg/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.