CVE-2024-32631

HIGH

Asrmicro Asr3603 Firmware < cp01.057.067 - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

References (1)

Core 1
Core References

Scores

CVSS v3 7.2
EPSS 0.0035
EPSS Percentile 57.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (13)
asrmicro/asr1602_firmware < cp01.057.067
asrmicro/asr1603_firmware < cp01.057.067
asrmicro/asr1605_firmware < cp01.057.067
asrmicro/asr1606_firmware < cp01.057.067
asrmicro/asr1607_firmware < cp01.057.067
asrmicro/asr1609_firmware < cp01.057.067
asrmicro/asr1803_firmware < cp01.057.067
asrmicro/asr1803sc_firmware < cp01.057.067
asrmicro/asr1806_firmware < cp01.057.067
asrmicro/asr3602_firmware < cp01.057.067
... and 3 more
Published Apr 16, 2024
Tracked Since Feb 18, 2026