← Back

CVE-2026-42800

nvd nist
Published: Apr 30, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c.

Affected (2)

Asrmicro
2 products
Asr1901 Firmware
Asr1903 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Asr1901 Firmware
Before 1.225.003
Running on/withPlatform Versions
Asrmicro
Asr1901
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Asr1903 Firmware
Before 1.225.003
Running on/withPlatform Versions
Asrmicro
Asr1903
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae
Vendor Advisory

Timeline

No history available yet.