CVE-2024-39290
NONE EPSS 28.5%
Published Nov 22, 20241y ago · Modified Jun 17, 20262w ago
Published Nov 22, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Threat Intelligence
EPSS Exploit Probability
28.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-522
References 5
- jvn.jp https://jvn.jp/en/jp/JVN41397971/
- aiphone.net https://www.aiphone.net/important/20241016_1/
- aiphone.net https://www.aiphone.net/important/20241016_2/
- aiphone.net https://www.aiphone.net/support/software-documents/ix/
- aiphone.net https://www.aiphone.net/support/software-documents/ixg/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.