CVE-2025-49488

Published: Jul 1, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

Affected (3)

Products: Asrmicro: Falcon Linux, Kestrel, Lapwing Linux

3 products

Configuration A

3 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Asrmicro Falcon Linux	Before 1536
Asrmicro Kestrel	Before 1536
Asrmicro Lapwing Linux	Before 1536

Running on/with	Platform Versions
Asrmicro Asr1803	All versions
Asrmicro Asr1806	All versions
Asrmicro Asr1901	All versions
Asrmicro Asr1903	All versions

Related CWEs

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (1)

https://www.asrmicro.com/en/goods/psirt?cid=40

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

Timeline

No history available yet.