Home
HIGH: 8.0 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
affected
Description
OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Problem types
Improper neutralization of special elements used in an OS command ('OS Command Injection')
Product status
References
www.aiphone.net/important/20241016_1/
www.aiphone.net/important/20241016_2/
www.aiphone.net/support/software-documents/ix/
www.aiphone.net/support/software-documents/ixg/
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.