Approved changes feed: RSS · Atom

cpe:2.3:a:aiphone_co.,_ltd.:ix-ss-2g:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAiphone Co., Ltd. (dbe3563e-d2e8-58b9-8a24-c2f09846b5a9)
ProductIx Ss 2G (ee85f1e3-e507-5d5d-a31b-07fea556202f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45837 vulnerable 2026-06-03 14:56:59.115582 Details available
MEDIUM (5.4)
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Published: 2024-11-22T00:13:01.908Z
Updated: 2024-11-22T11:34:09.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39290 vulnerable 2026-06-03 14:56:20.485736 Details available
MEDIUM (6.5)
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Published: 2024-11-22T00:11:56.742Z
Updated: 2024-11-22T11:34:09.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31408 vulnerable 2026-06-03 14:55:39.659310 Details available
HIGH (8)
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Published: 2024-11-22T00:10:50.954Z
Updated: 2024-12-05T20:44:27.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.