CVE-2024-32631: Asrmicro ASR1602 Firmware

High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

Affected products

• Asrmicro ASR1602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1606 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1607 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1609 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803SC Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1806 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3607 Firmware: before cp01.057.067 (fixed in cp01.057.067)

Published 2024-04-16. Last modified 2026-06-17.