Asrmicro Asr1806 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Asrmicro Asr1806 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2023-49701 — CVSS 7.2 (high): Memory Corruption in SIM management while USIMPhase2init
• CVE-2024-32631 — CVSS 7.2 (high): Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
• CVE-2023-49699 — CVSS 6.7 (medium): Memory Corruption in IMS while calling VoLTE Streamingmedia Interface
• CVE-2023-49700 — CVSS 6.7 (medium): Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the…
• CVE-2024-32632 — CVSS 6.6 (medium): A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
• CVE-2024-32634 — CVSS 6.1 (medium): In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
• CVE-2024-32625 — CVSS 5.8 (medium): In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations
• CVE-2024-32633 — CVSS 4.0 (medium): An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.