Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software.

Summary

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.

Timeline

1. Nov 22, 2024, 12:13 AM UTCCVE published
2. Nov 22, 2024, 11:29 AM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Nov 22, 2024, 11:34 AM UTCRecord last updated

Affected versions

• AIPHONE CO., LTD. IX-MV

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-HB

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-HBT

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-HW

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-HWT

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-HW-JP

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-B

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-BT

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-W

  Version range not reported

• AIPHONE CO., LTD. IX-MV7-WT

  Version range not reported

• AIPHONE CO., LTD. IX-DA

  Version range not reported

• AIPHONE CO., LTD. IX-DAU

  Version range not reported

• AIPHONE CO., LTD. IX-DB

  Version range not reported

• AIPHONE CO., LTD. IX-DBT

  Version range not reported

• AIPHONE CO., LTD. IX-EA

  Version range not reported

• AIPHONE CO., LTD. IX-EAT

  Version range not reported

• AIPHONE CO., LTD. IX-EAU

  Version range not reported

• AIPHONE CO., LTD. IX-DV

  Version range not reported

• AIPHONE CO., LTD. IX-DVT

  Version range not reported

• AIPHONE CO., LTD. IX-DVF

  Version range not reported

• AIPHONE CO., LTD. IX-DVF-P

  Version range not reported

• AIPHONE CO., LTD. IX-DVF-L

  Version range not reported

• AIPHONE CO., LTD. IX-DVM

  Version range not reported

• AIPHONE CO., LTD. IX-DU

  Version range not reported

• AIPHONE CO., LTD. IX-DVF-RA

  Version range not reported

• AIPHONE CO., LTD. IX-DVF-2RA

  Version range not reported

• AIPHONE CO., LTD. IX-BA

  Version range not reported

• AIPHONE CO., LTD. IX-BAU

  Version range not reported

• AIPHONE CO., LTD. IX-BB

  Version range not reported

• AIPHONE CO., LTD. IX-BBT

  Version range not reported

• AIPHONE CO., LTD. IX-FA

  Version range not reported

• AIPHONE CO., LTD. IX-SSA

  Version range not reported

• AIPHONE CO., LTD. IX-SS-2G

  Version range not reported

• AIPHONE CO., LTD. IX-SS-2GT

  Version range not reported

• AIPHONE CO., LTD. IX-SS-2G-N

  Version range not reported

• AIPHONE CO., LTD. IX-BU

  Version range not reported

• AIPHONE CO., LTD. IX-SSA-RA

  Version range not reported

• AIPHONE CO., LTD. IX-SSA-2RA

  Version range not reported

• AIPHONE CO., LTD. IX-RS-B

  Version range not reported

• AIPHONE CO., LTD. IX-RS-BT

  Version range not reported

• AIPHONE CO., LTD. IX-RS-W

  Version range not reported

• AIPHONE CO., LTD. IX-RS-WT

  Version range not reported

• AIPHONE CO., LTD. IXW-MA

  Version range not reported

• AIPHONE CO., LTD. IX-SPMIC

  Version range not reported

• AIPHONE CO., LTD. IXG-2C7

  Version range not reported

• AIPHONE CO., LTD. IXG-2C7-L

  Version range not reported

• AIPHONE CO., LTD. IXG-DM7

  Version range not reported

• AIPHONE CO., LTD. IXG-DM7-HID

  Version range not reported

• AIPHONE CO., LTD. IXG-DM7-HIDA

  Version range not reported

• AIPHONE CO., LTD. IXG-DM7-10K

  Version range not reported

• AIPHONE CO., LTD. IXG-MK

  Version range not reported

• AIPHONE CO., LTD. IXGW-GW

  Version range not reported

• AIPHONE CO., LTD. IXGW-TGW

  Version range not reported

• AIPHONE CO., LTD. IXGW-LC

  Version range not reported

• AIPHONE CO., LTD. IX-SupportTool

  Version range not reported

• AIPHONE CO., LTD. IXG-SupportTool

  Version range not reported

References 5