CVE-2023-49897
CISA 기관 조치 기한: 2024-01-11
FXC AE1021, AE1021PE
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
KEV 필수 조치: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
타임라인
- NVD 공개
- CISA KEV 등재(실제 악용 확인) 공개 후 15일
- CISA 기관 조치 기한 경과
벡터: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H