Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.
Metrics
Affected Vendors & Products
References
History
Fri, 22 Nov 2024 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 22 Nov 2024 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files. | |
| Weaknesses | CWE-321 | |
| References |
| |
| Metrics |
cvssV3_0
|
Status: PUBLISHED
Assigner: jpcert
Published: 2024-11-22T00:13:01.908Z
Updated: 2024-11-22T11:34:09.427Z
Reserved: 2024-09-26T01:39:36.313Z
Link: CVE-2024-45837
Updated: 2024-11-22T11:29:17.873Z
Status : Received
Published: 2024-11-22T02:15:21.120
Modified: 2024-11-22T02:15:21.120
Link: CVE-2024-45837
No data.