Aiphone Intercom Hacked? Here's How to Secure Your Door Station

Aiphone Intercom Hacked? Here's How to Secure Your Door Station

If your Aiphone intercom shows signs of being compromised—such as unauthorised access to video feeds or unexpected door release—act swiftly. This guide provides brand-specific steps to identify vulnerabilities, secure your system, and prevent future breaches. By following these measures, you can restore control and protect your property.

Quick Fixes to Try First

These 30-second checks address common causes of intercom security issues:

• Power cycle the door station: Unplug the device for 30 seconds, then reconnect. For PoE models, disconnect the Ethernet cable. This clears temporary glitches.
• Check the power LED indicator: A steady green light indicates normal operation. A blinking or absent light suggests a power issue or firmware failure.
• Test a call from the companion app: Open the AIPHONE IXG / Intercom App and initiate a call. If the video feed is unresponsive or shows unexpected content, the device may be compromised.
• Verify the door station screen is responsive: Touch the monitor to ensure it reacts to input. A frozen or unresponsive screen may indicate a software or hardware malfunction.
• Confirm the Ethernet/PoE cable is firmly seated: Loose connections can cause intermittent failures or unauthorised access through network vulnerabilities.

Step 1: Check SIP Registration on Your Aiphone Intercom

A compromised intercom often has incorrect SIP settings. To verify your configuration:

For IX-DV and IXG-2C7 Models

1. Access the web interface by navigating to the device's IP address in a browser.
2. Log in using the admin credentials (default is admin/admin unless changed).
3. Navigate to Services → SIP and check the Registrar Address, Proxy Server, and Authentication Credentials fields.
4. Ensure the Registration Status reads Registered. If not, re-enter the SIP details provided by your network administrator.

For JO-1MD Systems

The JO Series does not use SIP, so skip this step. Focus on checking the 4-wire cabling and door station firmware instead.

Step 2: Use the IXG Support Tool for Vulnerability Scans

The IXG Support Tool is a brand-specific diagnostic utility that identifies misconfigurations and potential security risks:

1. Download and install the tool from the Aiphone support website.
2. Connect to your network and select the door station from the device list.
3. Run a Security Scan to detect weak passwords, outdated firmware, or unauthorised access logs.
4. Follow the tool's recommendations to update firmware, change passwords, or reconfigure network settings.

Step 3: Verify Door Release Relay Configuration

If the door release function is malfunctioning or unauthorised, check the relay setup:

For IXG-2C7 Master Stations

1. Log into the web interface at the device's IP address.
2. Navigate to System → Relay Settings.
3. Confirm the Relay Type (NO/NC) matches your door lock's requirements.
4. Adjust the Trigger Duration (typically 1-5 seconds) to ensure the lock engages properly.
5. Use the Test Relay button to manually activate the relay and verify door release functionality.

For JO-1MD Systems

The JO Series uses a dedicated 4-wire bus, so relay configuration is handled through the door station's physical wiring. Ensure the relay is correctly connected to the lock mechanism and that the wiring is not damaged.

Step 4: Check PoE Power Budget and Switch Compatibility

PoE-powered Aiphone models like the IX-DV require sufficient power from the switch:

Is your door station PoE-powered or separately powered?

• PoE-powered → Check your switch's PoE budget—each port must deliver at least 12W for standard models and 25W for advanced units like the IXG-2C7. Use the Network diagnostics tool in the IXG Support Tool to confirm.
• Separately powered → Verify the 12V DC adapter output matches the device's requirements (typically 12V 1A for IX-DV models).

If the switch is over-subscribed, reconfigure VLANs or upgrade to a higher-wattage PoE switch. For multi-device installations, ensure the total power demand does not exceed the switch's capacity.

Step 5: Enable Two-Factor Authentication and Update Firmware

1. Open the AIPHONE IXG / Intercom App and navigate to Account Settings.
2. Enable Two-Factor Authentication using a trusted method (e.g. Google Authenticator).
3. Check for firmware updates in the app's Device Settings section. Install updates promptly to patch security vulnerabilities.
4. If the device is unreachable, use the IXG Support Tool to manually update firmware via the web interface.

When Basic Fixes Haven't Worked

If the above steps fail, proceed with a factory reset and deeper diagnostics:

Factory Reset for Aiphone Models

• IX-DV Door Station: Press and hold the factory reset button on the rear for 10 seconds until the LED flashes rapidly.
• IXG-2C7 Master Station: Hold the reset button on the back for 15 seconds until the screen displays a reset confirmation.
• JO-1MD Monitor: No network reset is required—reconfigure the 4-wire bus manually.

Analyse SIP Server Logs and Packet Capture

Use the IX Supervision Tool to capture SIP traffic and analyse logs for unauthorised access attempts. Look for unexpected registrations or failed authentication events.

Contact Manufacturer Support

If the issue persists, visit the Aiphone support portal or contact a certified installer for further assistance.

Understanding the Root Causes of a Hacked Aiphone Intercom

Common reasons for security breaches include:

• Weak or default SIP credentials: Unsecured SIP settings can allow unauthorised access to the intercom's video feed or door release function.
• Outdated firmware: Older versions may contain vulnerabilities that hackers exploit.
• Misconfigured PoE switches: Overloaded power budgets or incorrect VLAN settings can create network weaknesses.
• Poor physical security: Exposed outdoor units may be tampered with, allowing physical access to the device or network.
• UK-specific challenges: Older building wiring or weather exposure can degrade intercom performance and increase vulnerability.

Prevention and Long-Term Care for Your Aiphone Intercom

To avoid future breaches:

• Schedule regular firmware updates using the IXG Support Tool.
• Enable Two-Factor Authentication in the AIPHONE IXG / Intercom App.
• Use the Network diagnostics feature to monitor PoE switch health and VLAN configurations.
• Weatherproof outdoor units and inspect cabling regularly for damage.

Full disclosure: We built scOS to solve persistent connectivity issues with wired systems—but for Aiphone-specific problems, the steps above should resolve most issues.

Replacement Decisions and Lifespan Guidance

Aiphone intercoms typically last 5-8 years with proper maintenance. Signs of replacement include:

• Persistent firmware update failures
• Unresponsive touchscreens or frozen displays
• Failed door release functionality despite correct configuration
• Frequent connectivity issues despite network checks

Under the Consumer Rights Act 2015, UK consumers have up to 6 years to claim faulty goods (5 years in Scotland). If your intercom is beyond its expected lifespan, consult a certified installer for replacement options.