CVE-2024-39290

Description

Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.

References

https://www.aiphone.net/support/software-documents/ixg/

https://www.aiphone.net/support/software-documents/ix/

https://www.aiphone.net/important/20241016_2/

https://www.aiphone.net/important/20241016_1/

https://jvn.jp/en/jp/JVN41397971/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3