CyberSecBulletin

FXC vulnerabilities

We track 4 vulnerabilities in FXC products across 4 products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on December 18, 2024.

4vulnerabilities
0critical
4high
1exploited
7.7average CVSS score

Latest FXC vulnerabilities

  • 7.2 High severity

    AE1021: Inclusion of Undocumented Features or Chicken Bits

    CVE-2024-54457FXC

    Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service.

  • 7.2 High severity

    AE1021: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-53688FXCEPSS 1.58%

    Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary O

  • 7.5 High severity

    AE1021: Weak Authentication

    CVE-2024-47397FXC

    Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string.

  • 8.8 High severity

    FXC AE1021, AE1021PE OS Command Injection Exploited

    CVE-2023-49897FXCEPSS 50.4%

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.