CVE-2023-49897

🗓️ 06 Dec 2023 06:49:41Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 294 Views

An OS command injection vulnerability in AE1021PE and AE1021 firmwar

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2023-49897	6 Dec 202300:00	–	attackerkb
Circl	CVE-2023-49897	18 Dec 202309:41	–	circl
CISA KEV Catalog	FXC AE1021, AE1021PE OS Command Injection Vulnerability	21 Dec 202300:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	21 Dec 202312:00	–	cisa
CNNVD	FXC AE1021 Security Vulnerability	6 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-49897	6 Dec 202306:49	–	cvelist
ICS	FXC AE1021/AE1021PE	21 Dec 202307:00	–	ics
Japan Vulnerability Notes	FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection Critical	7 Dec 202306:09	–	jvn
NVD	CVE-2023-49897	6 Dec 202307:15	–	nvd
OpenVAS	FXC AE1021 / AE1021PE <= 2.0.9 OS Command Injection Vulnerability	22 Aug 202500:00	–	openvas

NVD

Vulners

Node

fxc ae1021_firmwareRange<2.0.10

AND

fxc ae1021Match-

Node

fxc ae1021pe_firmwareRange<2.0.10

AND

fxc ae1021peMatch-

[
  {
    "vendor": "FXC Inc.",
    "product": "AE1021PE",
    "versions": [
      {
        "version": "2.0.9 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FXC Inc.",
    "product": "AE1021",
    "versions": [
      {
        "version": "2.0.9 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU92152057/
akamai	www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
fxc	www.fxc.jp/news/20231206
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-355-01
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

24 Oct 2025 17:01Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.24413

SSVC

cve-2023-49897 os command injection ae1021pe ae1021 firmware vulnerability nvd