CVE-2024-32634

nvd nist

Published: Apr 16, 2024Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H

Exploitability: 0.9 / Impact: 4.7

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae (Secondary)

Description

In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

Affected (13)

Products: Asrmicro: Asr3603 Firmware, Asr1607 Firmware, Asr1803sc Firmware, Asr3602 Firmware, Asr3605 Firmware, Asr3607 Firmware, Asr1609 Firmware, Asr1605 Firmware, Asr1602 Firmware, Asr1603 Firmware, Asr1606 Firmware, Asr1803 Firmware, Asr1806 Firmware

13 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3603	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1607	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803sc Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803sc	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3602	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3605	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr3607 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr3607	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1609 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1609	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1605 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1605	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1602 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1602	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1603 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1603	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1606 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1606	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1803	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1806 Firmware	Before cp01.057.067

Running on/with	Platform Versions
Asrmicro Asr1806	All versions

Related CWEs

CWE-561

Dead Code

The product contains dead code, which can never be executed.

References (2)

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

https://www.asrmicro.com/en/goods/psirt?cid=38

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.