CVE-2023-49897
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
| Vendor | fxc inc. |
| Product | ae1021pe |
| Published | Dec 6, 2023 |
| Last Updated | Oct 21, 2025 |
⚠️ Actively Exploited — Act Now
Get instant alerts for fxc inc. ae1021pe
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2023-49897.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
FXC Inc. / AE1021PE
2.0.9 and earlier
FXC Inc. / AE1021
2.0.9 and earlier
References
fxc.jp: https://www.fxc.jp/news/20231206 jvn.jp: https://jvn.jp/en/vu/JVNVU92152057/ cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01 akamai.com: https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897