Vulnerability in Fsas Technologies Inc. Ipcom Ex2 Series
CVE-2024-39921
Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to V01L06NF0112. If this vulnerability is exploited, some of the encrypted communication may be decrypted by an attacker who can obtain the contents of the communication.
EPSS: 0.004 (35.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Fsas Technologies Inc. Ipcom Ex2 Series — versions V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301
- Fsas Technologies Inc. Ipcom Ve2 Series — versions V01L04NF0001 to V01L06NF0112
- Fujitsu Ipcom_ex2_dc_3200
- Fujitsu Ipcom_ex2_dc_3200_firmware
- Fujitsu Ipcom_ex2_dc_3500
- Fujitsu Ipcom_ex2_dc_3500_firmware
- Fujitsu Ipcom_ex2_in_3200
- Fujitsu Ipcom_ex2_in_3200_firmware
- Fujitsu Ipcom_ex2_in_3500
- Fujitsu Ipcom_ex2_in_3500_firmware
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vultures@jpcert.or.jp (Mitigation, Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2024-39921?
- CVE-2024-39921 is a high-severity vulnerability in Fsas Technologies Inc. Ipcom Ex2 Series, classified under Observable Discrepancy. CVSS score: 7.5/10. Published 2024-09-04.
- How severe is CVE-2024-39921?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2024-39921 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.