CVE-2024-32631

Published: Apr 16, 2024Modified: Jun 17, 2026

8.0

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 6.0

Source: NVD

Description

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

Affected (13)

Products: Asrmicro: Asr3602 Firmware, Asr3605 Firmware, Asr3607 Firmware, Asr1609 Firmware, Asr1605 Firmware, Asr1602 Firmware, Asr1603 Firmware, Asr1606 Firmware, Asr1803 Firmware, Asr1806 Firmware, Asr1803sc Firmware, Asr1607 Firmware, Asr3603 Firmware

13 products

Asr3602 Firmware

Asr3605 Firmware

Asr3607 Firmware

Asr1609 Firmware

Asr1605 Firmware

Asr1602 Firmware

Asr1603 Firmware

Asr1606 Firmware

Asr1803 Firmware

Asr1806 Firmware

Asr1803sc Firmware

Asr1607 Firmware

Asr3603 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3602	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3605	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3607	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1609 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1609	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1605	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1602	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1603	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1606 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1606	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1806 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1806	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803sc Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803sc	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1607	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3603	All versions

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.