Description (CNA)
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AIPHONE CO., LTD. / IX-MV | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-HB | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-HBT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-HW | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-HWT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-HW-JP | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-B | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-BT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-W | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-MV7-WT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DA | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DAU | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DB | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DBT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-EA | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-EAT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-EAU | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DV | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVT | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVF | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVF-P | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVF-L | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVM | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-DU | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVF-RA | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-DVF-2RA | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-BA | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-BAU | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-BB | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-BBT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-FA | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-SSA | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-SS-2G | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-SS-2GT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-SS-2G-N | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-BU | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-SSA-RA | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-SSA-2RA | affected firmware Ver.7.11 and earlier |
| AIPHONE CO., LTD. / IX-RS-B | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-RS-BT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-RS-W | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-RS-WT | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IXW-MA | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IX-SPMIC | affected firmware Ver.7.10 and earlier |
| AIPHONE CO., LTD. / IXG-2C7 | affected firmware Ver.3.01 and earlier |
| AIPHONE CO., LTD. / IXG-2C7-L | affected firmware Ver.3.01 and earlier |
| AIPHONE CO., LTD. / IXG-DM7 | affected firmware Ver.3.00 and earlier |
| AIPHONE CO., LTD. / IXG-DM7-HID | affected firmware Ver.3.00 and earlier |
| AIPHONE CO., LTD. / IXG-DM7-HIDA | affected firmware Ver.3.00 and earlier |
| AIPHONE CO., LTD. / IXG-DM7-10K | affected firmware Ver.3.00 and earlier |
| AIPHONE CO., LTD. / IXG-MK | affected firmware Ver.3.00 and earlier |
| AIPHONE CO., LTD. / IXGW-GW | affected firmware Ver.3.01 and earlier |
| AIPHONE CO., LTD. / IXGW-TGW | affected firmware Ver.3.01 and earlier |
| AIPHONE CO., LTD. / IXGW-LC | affected firmware Ver.3.00 and earlier |
CWE
CWE-78
References
- https://www.aiphone.net/important/20241016_1/
- https://www.aiphone.net/important/20241016_2/
- https://www.aiphone.net/support/software-documents/ix/
- https://www.aiphone.net/support/software-documents/ixg/
- https://jvn.jp/en/jp/JVN41397971/
ADP enrichment
No English description supplied.
No references supplied.