AIPHONE IX SYSTEM/IXG SYSTEM Vulnerabilities: RCE, Info Disclosure, SFTP Bypass (CVE-2024-31408/39290/45837/47142)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability ID and Description: - JVN#41397971 - Multiple vulnerabilities exist in AIPHONE IX SYSTEM, IXG SYSTEM, and system support software. 2. Affected Products: - IX SYSTEM: Includes various models and versions such as IX-MV, IX-MV7, IX-MV7-HB, IX-MV7-HBT, IX-MV7-HW, IX-MV7-HWT, IX-MV7-HW-JP, IX-MV7-B, IX-MV7-BT, IX-MV7-W, IX-MV7-WT, IX-DA, IX-DAU, IX-DB, IX-DBT, IX-EA, IX-EAT, IX-EAU, IX-DV, IX-DVT, IX-DVF, IX-DVF-P, IX-DVF-L, IX-DVM, IX-DU, IX-DVF-RA, IX-DVF-2RA, IX-BA, IX-BAU, IX-BB, IX-BBT, IX-FA, IX-SSA, IX-SS-2G, IX-SS-2GT, IX-SS-2G-N, IX-BU, IX-SSA-RA, IX-SSA-2RA, IX-RS-B, IX-RS-BT, IX-RS-W, IX-RS-WT, IXW-MA, IX-SPMIC, etc. - IXG SYSTEM: Includes various models and versions such as IXG-2C7, IXG-2C7-L, IXG-DM7, IXG-DM7-HID, IXG-DM7-HIDA, IXG-DM7-10K, IXG-MK, IXG-GW, IXG-TGW, IXG-LC, etc. - System Support Software: Includes IX-SupportTool and IXG-SupportTool. 3. Vulnerability Types: - OS Command Injection (CWE-78) - Insufficient Protection of Credentials (CWE-522) - Use of Hard-coded Keys (CWE-321) - Insufficient Protection of Credentials (CWE-522) 4. Impact: - Network-adjacent authenticated attackers can execute arbitrary OS commands with root privileges (CVE-2024-31408) - Network-adjacent unauthenticated attackers can obtain sensitive information from the address book (CVE-2024-39290) - Network-adjacent unauthenticated attackers can log in to the SFTP service and access or manipulate unauthorized files (CVE-2024-45837) - Network-adjacent authenticated attackers can perform unauthorized operations (CVE-2024-47142) 5. Solution: - Update firmware to the latest version. 6. Reference Links: - Vulnerability information for AIPHONE CO., LTD.'s IX SYSTEM and IXG SYSTEM. - Software and documentation for IX SYSTEM and IXG SYSTEM. 7. Additional Information: - Vulnerability analysis and coordination by JPCERT/CC. - Credit: Reported to AIPHONE CO., LTD. and coordinated by Claroty Research - Team82. 8. Update History: - 2024/11/21: CWE number for CVE-2024-47142 updated from 284 to 522. This information provides detailed descriptions of the vulnerabilities, affected products, vulnerability types, impacts, solutions, and reference links.

Goal Reached Thanks to every supporter — we hit 100%!

AIPHONE IX SYSTEM/IXG SYSTEM Vulnerabilities: RCE, Info Disclosure, SFTP Bypass (CVE-2024-31408/39290/45837/47142)