ICSA-23-355-01

icsaUScisa_csaf_ot

FXC AE1021/AE1021PE

view advisory published 2023-12-21

Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server settings.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-49897UShigh8.8OT criticalKEV
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an ar…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationAE1021 firmware

    FXC recommends users apply the following settings:

  • MitigationAE1021PE firmware

    FXC recommends users apply the following settings:

  • FixedAE1021 firmware

    AE1021 firmware: version 2.0.10.

  • FixedAE1021PE firmware

    AE1021PE firmware: version 2.0.10.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan