Home / Vulnerabilities / CVE-2023-49897
HIGH SEVERITY
CVE-2023-49897FXC · AE1021, AE1021PE

FXC AE1021, AE1021PE OS Command Injection Vulnerability

Technical Severity

CVSS v3.1 Metrics

HIGH
8.8 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Likelihood

EPSS Prediction

24.05 %
Predictive Probability
Percentile Rank
96.0 th

Documented as more likely to be exploited than 96.0% of known CVEs.

Detection Date

Dec 21, 2023

Remediation Due

Jan 11, 2024

CISA Catalog Active

Threat Analysis

FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://www.fxc.jp/news/20231206

https://www.fxc.jp/news/20231206

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2023-49897