Asr3602 Firmware
CVE-2024-32631
HIGH
Severity by source
AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
AnalysisAI
Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations. Affected products include: Asrmicro Asr3602 Firmware, Asrmicro Asr3605 Firmware, Asrmicro Asr3607 Firmware, Asrmicro Asr1609 Firmware, Asrmicro Asr1605 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.
More in Asr3602 Firmware
View allA value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access. Ra
In huge memory get unmapped area check, code can never be reached because of a logical contradiction. Rated medium sever
In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computa
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way. Rated medium severity
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today