CVE-2023-49897

FXC AE1021, AE1021PE OS Command Injection Vulnerability

Ae1021 Firmware

An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

6. Dez 2023

Ausgewertete Quellen

• Hersteller
  https://www.fxc.jp/news/20231206
• Hinweis
  https://jvn.jp/en/vu/JVNVU92152057/
• Hinweis
  https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897
• CISA
  FXC AE1021, AE1021PE OS Command Injection Vulnerability
• CISA
  https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01
• NVD
  CVE-2023-49897