CVE-2024-32625: Asrmicro ASR1602 Firmware

Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations

Affected products

• Asrmicro ASR1602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1606 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1607 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1609 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803SC Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1806 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3607 Firmware: before cp01.057.067 (fixed in cp01.057.067)

Published 2024-04-16. Last modified 2026-06-17.