CVE-2024-39290 Information

Description

Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.

Reference

https://jvn.jp/en/jp/JVN41397971/ https://www.aiphone.net/important/20241016_1/ https://www.aiphone.net/important/20241016_2/ https://www.aiphone.net/support/software-documents/ix/ https://www.aiphone.net/support/software-documents/ixg/