Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-39921


Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to V01L06NF0112. If this vulnerability is exploited, some of the encrypted communication may be decrypted by an attacker who can obtain the contents of the communication.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), for affected systems. Impacting 38 products from fujitsu, from fujitsu, from fujitsu and 35 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2024, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2024-09-04T03:15:03.300

Last Modified

2025-03-13T14:15:29.073

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-203
  • Type: Secondary
    CWE-203

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System fujitsu ipcom_ve2_ls_100_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_100 - No
Operating System fujitsu ipcom_ve2_ls_200_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_200 - No
Operating System fujitsu ipcom_ve2_ls_220_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_220 - No
Operating System fujitsu ipcom_ve2_ls_plus_100_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_plus_100 - No
Operating System fujitsu ipcom_ve2_ls_plus_200_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_plus_200 - No
Operating System fujitsu ipcom_ve2_ls_plus_220_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_plus_220 - No
Operating System fujitsu ipcom_ve2_ls_plus2_200_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_plus2_200 - No
Operating System fujitsu ipcom_ve2_ls_plus2_220_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_ls_plus2_220 - No
Operating System fujitsu ipcom_ve2_sc_plus_100_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_sc_plus_100 - No
Operating System fujitsu ipcom_ve2_sc_plus_200_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_sc_plus_200 - No
Operating System fujitsu ipcom_ve2_sc_plus_220_firmware ≤ v01l06nf0112 Yes
Hardware fujitsu ipcom_ve2_sc_plus_220 - No
Operating System fujitsu ipcom_ex2_in_3200_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_in_3200_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_in_3200_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_in_3200 - No
Operating System fujitsu ipcom_ex2_in_3500_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_in_3500_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_in_3500_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_in_3500 - No
Operating System fujitsu ipcom_ex2_lb_3200_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_lb_3200_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_lb_3200_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_lb_3200 - No
Operating System fujitsu ipcom_ex2_lb_3500_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_lb_3500_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_lb_3500_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_lb_3500 - No
Operating System fujitsu ipcom_ex2_sc_3200_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_sc_3200_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_sc_3200_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_sc_3200 - No
Operating System fujitsu ipcom_ex2_sc_3500_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_sc_3500_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_sc_3500_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_sc_3500 - No
Operating System fujitsu ipcom_ex2_dc_3200_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_dc_3200_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_dc_3200_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_dc_3200 - No
Operating System fujitsu ipcom_ex2_dc_3500_firmware ≤ v01l06nf0401 Yes
Operating System fujitsu ipcom_ex2_dc_3500_firmware ≤ v01l20nf0401 Yes
Operating System fujitsu ipcom_ex2_dc_3500_firmware ≤ v02l21nf0301 Yes
Hardware fujitsu ipcom_ex2_dc_3500 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For fujitsu's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.