Description
FXC AE1021PE存在命令注入漏洞，该漏洞是由于接口对ntp.general.hostname参数的值验证不当导致的。
FXC AE1021PE CVE-2023-49897 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-49897
https://www.akamai.com/zh/blog/security-research/zero-day-vulnerability-spreading-mirai-patched
https://www.dptech.com/uploadfile/2023/1208/20231208043316493.pdf
https://www.anquanke.com/post/id/291998
https://blog.csdn.net/qq_51524329/article/details/141501395
https://cn-sec.com/archives/2333704.html
https://nvd.nist.gov/vuln/detail/CVE-2023-49897
https://www.sentinelone.com/vulnerability-database/cve-2023-49897/
https://appcheck-ng.com/cve-2023-49897/
https://cvefeed.io/vuln/detail/CVE-2023-49897
https://vulners.com/cve/CVE-2023-49897
https://github.com/advisories/GHSA-x3f3-j7qh-9wgj