https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:20:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-206266 EUVD-2026-206266 https://cve.radiocsirt.org/vuln/euvd-2026-206266 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31408 <p>OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.</p> <p>OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31408 https://cve.radiocsirt.org/vuln/ghsa-865x-83mq-3qpq <p>OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.</p> <p>OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.</p> https://cve.radiocsirt.org/vuln/ghsa-865x-83mq-3qpq https://cve.radiocsirt.org/vuln/jvndb-2024-000106 <p>AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;OS command injection (CWE-78)&lt;/b&gt; - CVE-2024-31408&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insufficiently protected credentials (CWE-522)&lt;/b&gt; - CVE-2024-39290&lt;/li&gt; &lt;li&gt;&lt;b&gt;Use of hard-coded cryptographic key (CWE-321)&lt;/b&gt; - CVE-2024-45837&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper access control (CWE-522)&lt;/b&gt; - CVE-2024-47142&lt;/li&gt; &lt;/ul&gt; Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.</p> <p>AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;OS command injection (CWE-78)&lt;/b&gt; - CVE-2024-31408&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insufficiently protected credentials (CWE-522)&lt;/b&gt; - CVE-2024-39290&lt;/li&gt; &lt;li&gt;&lt;b&gt;Use of hard-coded cryptographic key (CWE-321)&lt;/b&gt; - CVE-2024-45837&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper access control (CWE-522)&lt;/b&gt; - CVE-2024-47142&lt;/li&gt; &lt;/ul&gt; Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000106