Asrmicro Asr3607 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Asrmicro Asr3607 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-32631 — CVSS 7.2 (high): Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
• CVE-2024-32632 — CVSS 6.6 (medium): A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
• CVE-2024-32634 — CVSS 6.1 (medium): In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
• CVE-2024-32625 — CVSS 5.8 (medium): In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations
• CVE-2024-32633 — CVSS 4.0 (medium): An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.