CVE-2024-39921

🗓️ 04 Sep 2024 01:51:14Reported by jpcertType

Observable timing discrepancy issue in IPCOM EX2 & VE2 Serie

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-39921	4 Sep 202406:01	–	circl
CNNVD	Fujitsu IPCOM EX2 安全漏洞	30 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-39921	4 Sep 202401:51	–	cvelist
EUVD	EUVD-2024-38301	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#29238389: IPCOM vulnerable to information disclosure	30 Aug 202400:00	–	jvn
Japan Vulnerability Notes	IPCOM vulnerable to information disclosure	30 Aug 202405:56	–	jvn
NVD	CVE-2024-39921	4 Sep 202403:15	–	nvd
RedhatCVE	CVE-2024-39921	23 May 202507:27	–	redhatcve
Vulnrichment	CVE-2024-39921	4 Sep 202401:51	–	vulnrichment

NVD

Node

fujitsu ipcom_ve2_ls_100_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_100Match-

Node

fujitsu ipcom_ve2_ls_200_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_200Match-

Node

fujitsu ipcom_ve2_ls_220_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_220Match-

Node

fujitsu ipcom_ve2_ls_plus_100_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_plus_100Match-

Node

fujitsu ipcom_ve2_ls_plus_200_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_plus_200Match-

Node

fujitsu ipcom_ve2_ls_plus_220_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_plus_220Match-

Node

fujitsu ipcom_ve2_ls_plus2_200_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_plus2_200Match-

Node

fujitsu ipcom_ve2_ls_plus2_220_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_ls_plus2_220Match-

Node

fujitsu ipcom_ve2_sc_plus_100_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_sc_plus_100Match-

Node

fujitsu ipcom_ve2_sc_plus_200_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_sc_plus_200Match-

Node

fujitsu ipcom_ve2_sc_plus_220_firmwareRangev01l04nf0001–v01l06nf0112

AND

fujitsu ipcom_ve2_sc_plus_220Match-

Node

fujitsu ipcom_ex2_in_3200_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_in_3200_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_in_3200_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_in_3200Match-

Node

fujitsu ipcom_ex2_in_3500_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_in_3500_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_in_3500_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_in_3500Match-

Node

fujitsu ipcom_ex2_lb_3200_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_lb_3200_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_lb_3200_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_lb_3200Match-

Node

fujitsu ipcom_ex2_lb_3500_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_lb_3500_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_lb_3500_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_lb_3500Match-

Node

fujitsu ipcom_ex2_sc_3200_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_sc_3200_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_sc_3200_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_sc_3200Match-

Node

fujitsu ipcom_ex2_sc_3500_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_sc_3500_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_sc_3500_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_sc_3500Match-

Node

fujitsu ipcom_ex2_dc_3200_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_dc_3200_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_dc_3200_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_dc_3200Match-

Node

fujitsu ipcom_ex2_dc_3500_firmwareRangev01l02nf0001–v01l06nf0401

fujitsu ipcom_ex2_dc_3500_firmwareRangev01l20nf0001–v01l20nf0401

fujitsu ipcom_ex2_dc_3500_firmwareRangev02l20nf0001–v02l21nf0301

AND

fujitsu ipcom_ex2_dc_3500Match-

[
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "IPCOM EX2 Series",
    "versions": [
      {
        "version": "V01L02NF0001 to V01L06NF0401",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "IPCOM EX2 Series",
    "versions": [
      {
        "version": "V01L20NF0001 to V01L20NF0401",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "IPCOM EX2 Series",
    "versions": [
      {
        "version": "V02L20NF0001 to V02L21NF0301",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "IPCOM VE2 Series",
    "versions": [
      {
        "version": "V01L04NF0001 to V01L06NF0112",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fujitsu	www.fujitsu.com/jp/products/network/support/2024/ipcom-04/
jvn	www.jvn.jp/en/jp/JVN29238389/

13 Mar 2025 14:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00403

SSVC

CWE-203