CVE-2023-49897

Опубликовано: 06 дек. 2023

Источник: nvd

CVSS3: 8.8

EPSS Средний

Описание

An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Ссылки

https://jvn.jp/en/vu/JVNVU92152057/
Third Party Advisory
https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
Exploit
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01
Third Party Advisory
US Government Resource
https://www.fxc.jp/news/20231206
Release Notes
Vendor Advisory
https://jvn.jp/en/vu/JVNVU92152057/
Third Party Advisory
https://www.akamai.com/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
Exploit
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01
Third Party Advisory
US Government Resource
https://www.fxc.jp/news/20231206
Release Notes
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49897
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:fxc:ae1021_firmware:*:*:*:*:*:*:*:*

Версия до 2.0.10 (исключая)

cpe:2.3:h:fxc:ae1021:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:fxc:ae1021pe_firmware:*:*:*:*:*:*:*:*

Версия до 2.0.10 (исключая)

cpe:2.3:h:fxc:ae1021pe:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.37288

Средний

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-x3f3-j7qh-9wgj

CVSS3: 8.8

github

около 2 лет назад

BDU:2023-08674

CVSS3: 8

fstec