جزئیات آسیب‌پذیری
CVE-2024-31408
AIPHONE IX-BAAIPHONE IX-BAUAIPHONE IX-BBAIPHONE IX-BBTAIPHONE IX-BUAIPHONE IX-DA
CVSS 3.0
8.0بالا
شرح رسمی (انگلیسی)
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.0بالا | 3.0 | CVEProject cvelistV5 (CNA) (jpcert) | CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| AIPHONE CO., LTD. | IX-BA | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-BAU | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-BB | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-BBT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-BU | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DA | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DAU | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DB | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DBT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DU | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DV | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVF | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVF-2RA | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVF-L | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVF-P | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVF-RA | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVM | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-DVT | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-EA | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-EAT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-EAU | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-FA | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-B | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-BT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-HB | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-HBT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-HW | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-HW-JP | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-HWT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-W | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-MV7-WT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-RS-B | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-RS-BT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-RS-W | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-RS-WT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SPMIC | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SS-2G | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SS-2G-N | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SS-2GT | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SSA | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SSA-2RA | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IX-SSA-RA | firmware Ver.7.11 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-2C7 | firmware Ver.3.01 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-2C7-L | firmware Ver.3.01 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-DM7 | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-DM7-10K | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-DM7-HID | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-DM7-HIDA | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXG-MK | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXGW-GW | firmware Ver.3.01 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXGW-LC | firmware Ver.3.00 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXGW-TGW | firmware Ver.3.01 and earlier | CVEProject cvelistV5 (CNA) |
| AIPHONE CO., LTD. | IXW-MA | firmware Ver.7.10 and earlier | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۵
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۰۹/۰۲
- آخرین به‌روزرسانی
- ۱۴۰۳/۰۹/۱۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- jpcert
پیش‌بینی بهره‌برداری (EPSS)
۱٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۶۶٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-78Improper neutralization of special elements used in an OS command ('OS Command Injection')