Asr1803 Firmware
CVE-2023-49701
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Memory Corruption in SIM management while USIMPhase2init
AnalysisAI
Memory Corruption in SIM management while USIMPhase2init. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Affected products include: Asrmicro Asr1803 Firmware, Asrmicro Asr1806 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.
More in Asr1803 Firmware
View allOut-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations. Rated high severity (CVSS 8.0), this vuln
Memory Corruption in IMS while calling VoLTE Streamingmedia Interface. Rated high severity (CVSS 7.8), this vulnerabilit
Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destinati
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access. Ra
In huge memory get unmapped area check, code can never be reached because of a logical contradiction. Rated medium sever
In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computa
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way. Rated medium severity
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today