Exploited vulnerability
CVE-2023-49897
TLP:CLEAR
FXC AE1021, AE1021PE OS Command Injection Vulnerability
FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.
Facts
- Vendor: FXC
- Product: AE1021, AE1021PE
- CVSS: 8.8
- EPSS (probability of exploitation within 30 days): 50.4 %
- On CISA's Known Exploited Vulnerabilities list since: 21 December 2023
- First known exploitation: 21 December 2023
- CISA's deadline for US federal agencies: 11 January 2024
- Weakness: CWE-78
- First seen by Risk Letters: 21 December 2023
Members see which Nordic sectors the flaw hits, and what to do about it.
Get the full brief
Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD