https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:21:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-203685 EUVD-2026-203685 https://cve.radiocsirt.org/vuln/euvd-2026-203685 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45837 <p>Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.</p> <p>Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45837 https://cve.radiocsirt.org/vuln/ghsa-rjm6-gxhw-jxmp <p>Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.</p> <p>Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.</p> https://cve.radiocsirt.org/vuln/ghsa-rjm6-gxhw-jxmp https://cve.radiocsirt.org/vuln/jvndb-2024-000106 <p>AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;OS command injection (CWE-78)&lt;/b&gt; - CVE-2024-31408&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insufficiently protected credentials (CWE-522)&lt;/b&gt; - CVE-2024-39290&lt;/li&gt; &lt;li&gt;&lt;b&gt;Use of hard-coded cryptographic key (CWE-321)&lt;/b&gt; - CVE-2024-45837&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper access control (CWE-522)&lt;/b&gt; - CVE-2024-47142&lt;/li&gt; &lt;/ul&gt; Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.</p> <p>AIPHONE IX SYSTEM is an IP Network Audio-Video Intercom and IXG SYSTEM is an IP-based Residential System. IX SYSTEM, IXG SYSTEM, and System Support Software contain multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;&lt;b&gt;OS command injection (CWE-78)&lt;/b&gt; - CVE-2024-31408&lt;/li&gt; &lt;li&gt;&lt;b&gt;Insufficiently protected credentials (CWE-522)&lt;/b&gt; - CVE-2024-39290&lt;/li&gt; &lt;li&gt;&lt;b&gt;Use of hard-coded cryptographic key (CWE-321)&lt;/b&gt; - CVE-2024-45837&lt;/li&gt; &lt;li&gt;&lt;b&gt;Improper access control (CWE-522)&lt;/b&gt; - CVE-2024-47142&lt;/li&gt; &lt;/ul&gt; Vera Mens of Claroty Research - Team82 reported these vulnerabilities to AIPHONE CO., LTD. and coordinated. After the coordination was completed, AIPHONE CO., LTD. reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000106