Vendors / AIPHONE CO., LTD. Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now AIPHONE CO., LTD. records in CISA KEV No AIPHONE CO., LTD. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM.
CVSS 3.0 HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01108 · Published 2024-11-22 · No fix listed CWE-78
Priority LOW 29
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM.
CVSS 3.0 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00371 · Published 2024-11-22 · No fix listed CWE-522
Priority LOW 29
Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00321 · Published 2022-11-14 · No fix listed CWE-307
Priority LOW 24
AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently protected credentials, which may allow a network-adjacent authenticated attacker t…
CVSS 3.0 MEDIUM 5.5· Adjacent network · Low privileges · No interaction · EPSS 0.00262 · Published 2024-11-22 · No fix listed CWE-522
Priority LOW 24
Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software.
CVSS 3.0 MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00333 · Published 2024-11-22 · No fix listed CWE-321
Open these records in search → All records by CVSS severity
Critical0 High1 Medium4 Low0 No CVSS0