CVE-2023-49700

Published: Nov 30, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.

Affected (2)

Products: Asrmicro: Asr1803 Firmware, Asr1806 Firmware

Asrmicro

2 products

Asr1803 Firmware

Asr1806 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803 Firmware	Version cp01.057.063

Running on/with	Platform Versions
Asrmicro Asr1803	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1806 Firmware	Version cp01.057.063

Running on/with	Platform Versions
Asrmicro Asr1806	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.asrmicro.com/en/goods/psirt?cid=31

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

https://www.asrmicro.com/en/goods/psirt?cid=31

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.