CVE-2024-32632

nvd nist

Published: Apr 16, 2024Modified: Jun 17, 2026

6.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Exploitability: 2.1 / Impact: 4.0

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae (Secondary)

Description

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

Affected (13)

Products: Asrmicro: Asr1803sc Firmware, Asr1607 Firmware, Asr3603 Firmware, Asr1806 Firmware, Asr1803 Firmware, Asr1606 Firmware, Asr1603 Firmware, Asr1602 Firmware, Asr1605 Firmware, Asr1609 Firmware, Asr3607 Firmware, Asr3605 Firmware, Asr3602 Firmware

13 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803sc Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803sc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1607	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3603	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1806 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1806	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1606 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1606	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1603	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1602	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1605	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1609 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1609	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3607	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3605	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3602	All versions

Related CWEs

CWE-686

Function Call With Incorrect Argument Type

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

References (2)

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.