Approved changes feed: RSS · Atom

cpe:2.3:a:aiphone_co.,_ltd.:ix-db:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAiphone Co., Ltd. (dbe3563e-d2e8-58b9-8a24-c2f09846b5a9)
ProductIx Db (f228f65f-dcd8-5b58-8c56-e2d7b80cd95a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45837 vulnerable 2026-06-03 14:56:59.105386 Details available
MEDIUM (5.4)
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Published: 2024-11-22T00:13:01.908Z
Updated: 2024-11-22T11:34:09.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39290 vulnerable 2026-06-03 14:56:20.475685 Details available
MEDIUM (6.5)
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Published: 2024-11-22T00:11:56.742Z
Updated: 2024-11-22T11:34:09.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31408 vulnerable 2026-06-03 14:55:39.637150 Details available
HIGH (8)
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Published: 2024-11-22T00:10:50.954Z
Updated: 2024-12-05T20:44:27.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.