Read the docs

ASR

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

ASR records in CISA KEV

No ASR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Asr1602 Firmware · all components

TI-2024-21513 CVE-2024-32631 · GHSA-3hx8-25m4-f73q

Out-of-bounds read in telephony

Priority LOW 35

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00334 Published 2024-04-16 Fixed in CP01.057.067 CWE-125
TI-2024-21514 CVE-2024-32632 · GHSA-xqh5-pm55-j7f5

Printf arg type mismatch in ATCMD

Priority LOW 29

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

CVSS 3.1MEDIUM 6.6 Adjacent network No auth User interaction EPSS 0.00226 Published 2024-04-16 Fixed in CP01.057.067 CWE-686
TI-2024-21516 CVE-2024-32634 · GHSA-783r-wg7h-79gm

Logically dead code

Priority LOW 27

In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00266 Published 2024-04-16 Fixed in CP01.057.067 CWE-561
TI-2024-21512 CVE-2024-32625 · GHSA-qp6g-f22x-mgxr

Uninitialized scalar field

Priority LOW 26

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00417 Published 2024-04-16 Fixed in CP01.057.067 CWE-457
TI-2024-21515 CVE-2024-32633 · GHSA-9m2p-fj6h-mrv7

Unsigned compared against 0

Priority LOW 18

An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.

CVSS 3.1MEDIUM 4.0 Physical No auth No interaction EPSS 0.00234 Published 2024-04-16 Fixed in CP01.057.067 CWE-570
Open these records in search →