Insufficiently protected credentials in AIPHONE CO., LTD. IX-MV
Priority LOW 29CWE-522Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-522.
Summary
Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00371 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AIPHONE CO., LTD. | IX-MV | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-HB | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-HBT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-HW | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-HWT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-HW-JP | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-B | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-BT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-W | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-MV7-WT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DA | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DAU | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DB | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DBT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-EA | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-EAT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-EAU | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DV | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVT | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVF | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVF-P | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVF-L | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVM | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DU | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVF-RA | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-DVF-2RA | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-BA | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-BAU | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-BB | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-BBT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-FA | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SSA | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SS-2G | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SS-2GT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SS-2G-N | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-BU | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SSA-RA | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SSA-2RA | firmware Ver.7.11 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-RS-B | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-RS-BT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-RS-W | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-RS-WT | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXW-MA | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IX-SPMIC | firmware Ver.7.10 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-2C7 | firmware Ver.3.01 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-2C7-L | firmware Ver.3.01 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-DM7 | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-DM7-HID | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-DM7-HIDA | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-DM7-10K | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXG-MK | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXGW-GW | firmware Ver.3.01 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXGW-TGW | firmware Ver.3.01 and earlier | — | No fix listed | CNA |
| AIPHONE CO., LTD. | IXGW-LC | firmware Ver.3.00 and earlier | — | No fix listed | CNA |
- IX-MV VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-HB VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-HBT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-HW VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-HWT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-HW-JP VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-B VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-BT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-W VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-MV7-WT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DA VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DAU VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DB VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DBT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-EA VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-EAT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-EAU VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DV VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVT VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVF VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVF-P VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVF-L VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVM VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-DU VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVF-RA VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-DVF-2RA VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-BA VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-BAU VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-BB VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-BBT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-FA VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-SSA VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-SS-2G VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-SS-2GT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-SS-2G-N VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-BU VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-SSA-RA VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-SSA-2RA VendorAIPHONE CO., LTD. Affected firmware Ver.7.11 and earlier Fixed in — No fix listed CNA
- IX-RS-B VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-RS-BT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-RS-W VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-RS-WT VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IXW-MA VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IX-SPMIC VendorAIPHONE CO., LTD. Affected firmware Ver.7.10 and earlier Fixed in — No fix listed CNA
- IXG-2C7 VendorAIPHONE CO., LTD. Affected firmware Ver.3.01 and earlier Fixed in — No fix listed CNA
- IXG-2C7-L VendorAIPHONE CO., LTD. Affected firmware Ver.3.01 and earlier Fixed in — No fix listed CNA
- IXG-DM7 VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
- IXG-DM7-HID VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
- IXG-DM7-HIDA VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
- IXG-DM7-10K VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
- IXG-MK VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
- IXGW-GW VendorAIPHONE CO., LTD. Affected firmware Ver.3.01 and earlier Fixed in — No fix listed CNA
- IXGW-TGW VendorAIPHONE CO., LTD. Affected firmware Ver.3.01 and earlier Fixed in — No fix listed CNA
- IXGW-LC VendorAIPHONE CO., LTD. Affected firmware Ver.3.00 and earlier Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-39290
- 2026-10-03 Alias added: GHSA-rwfw-fp96-gm62
References
More AIPHONE CO., LTD. vulnerabilities
- TI-2024-20779 OS command injection in AIPHONE CO., LTD. IX-MV CVSS 3.0HIGH 8.0
- TI-2022-19474 Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate… CVSS 3.1MEDIUM 6.5
- TI-2024-31514 Insufficiently protected credentials in AIPHONE CO., LTD. IXG-2C7 CVSS 3.0MEDIUM 5.5
- TI-2024-30796 Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and… CVSS 3.0MEDIUM 5.4
Sources
- CVE-2024-39290 · CVE Program
- CVE-2024-39290 · NVD
- FIRST EPSS
- GHSA-rwfw-fp96-gm62 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences