Unsigned compared against 0
Priority LOW 18CWE-570Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00234 14th percentileScored 2026-11-07
Fix Fixed Falcon/Crane (ASR): CP01.057.067
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASR | Falcon/Crane | before CP01.057.067 | CP01.057.067 | Patch available | CNA |
- Falcon/Crane VendorASR Affected before CP01.057.067 Fixed in CP01.057.067 Patch available CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asrmicro:asr1803sc_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1803sc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1607_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1607:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr3603_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr3603:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr3602_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr3602:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr3605_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr3605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
- cpe:2.3:o:asrmicro:asr1803sc_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1803sc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1607_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1607:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr3603_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr3603:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr3602_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr3602:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr3605_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr3605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asrmicro:asr3607_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr3607:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1609_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1609:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1605_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1602_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1602:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1603_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1603:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1606_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1606:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1803_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1803:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
| cpe:2.3:o:asrmicro:asr1806_firmware:*:*:*:*:*:*:*:* | before cp01.057.067 | Vulnerable | ASR |
| cpe:2.3:h:asrmicro:asr1806:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASR |
- cpe:2.3:o:asrmicro:asr3607_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr3607:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1609_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1609:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1605_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1602_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1602:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1603_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1603:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1606_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1606:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1803_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1803:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
- cpe:2.3:o:asrmicro:asr1806_firmware:*:*:*:*:*:*:*:* Versions before cp01.057.067 Vulnerable ·ASR
- cpe:2.3:h:asrmicro:asr1806:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASR
Remediation
- Fix · CNA Falcon/Crane (ASR) Fixed in CP01.057.067
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
ASR Falcon/Crane CP01.057.067
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2024-21513 Out-of-bounds read in telephonyPriority LOW 35
- TI-2024-21514 Printf arg type mismatch in ATCMDPriority LOW 29
- TI-2024-21512 Uninitialized scalar fieldPriority LOW 26
Timeline
- 2026-10-02 Threatist record created from CVE-2024-32633
- 2026-10-03 Alias added: GHSA-9m2p-fj6h-mrv7
References
More Asr1602 Firmware vulnerabilities
- TI-2024-21513 Out-of-bounds read in telephony CVSS 3.1HIGH 8.0
- TI-2024-21514 Printf arg type mismatch in ATCMD CVSS 3.1MEDIUM 6.6
- TI-2024-21516 Logically dead code CVSS 3.1MEDIUM 6.1
- TI-2024-21512 Uninitialized scalar field CVSS 3.1MEDIUM 5.8
Sources
- CVE-2024-32633 · CVE Program
- CVE-2024-32633 · NVD
- FIRST EPSS
- GHSA-9m2p-fj6h-mrv7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences