← CVE Radar
CVE-2023-49897FXC AE1021, AE1021PE OS Command Injection Vulnerability
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
8.8 HIGHEPSS 50.44%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Jan 11, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2023-49897
- Status
- Analyzed
- Assigner (CNA)
- jpcert
- Published
- Dec 6, 2023
- Last modified
- 2026-06-17 06:36 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
FXC Inc.AE1021PE1 version range
- 2.0.9 and earlier
FXC Inc.AE10211 version range
- 2.0.9 and earlier
References
- jvn.jp https://jvn.jp/en/vu/JVNVU92152057/
- akamai.com https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
- cisa.gov https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01
- fxc.jp https://www.fxc.jp/news/20231206
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897