Description
Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.
References (1)
Core 1
Core References
Various Sources
https://www.asrmicro.com/en/goods/psirt?cid=41
Scores
CVSS v3
7.4
EPSS
0.0004
EPSS Percentile
13.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
Status
published
Products (1)
ASR/Lapwing_Linux
< 2025/11/26
Published
Nov 26, 2025
Tracked Since
Feb 18, 2026