CVE-2024-45837CWE-321

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software

Medium · published November 22, 2024

CVSS v3.0
5.4
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.5th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2024-11-22T00:13Z
EPSS history
Timeline
  • 22 NOV 00:13Z
    Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
    cvelistv5