CVE-2024-32632: Asrmicro ASR1602 Firmware

Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days.

A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

Affected products

• Asrmicro ASR1602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1606 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1607 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1609 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803SC Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1806 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3607 Firmware: before cp01.057.067 (fixed in cp01.057.067)

Published 2024-04-16. Last modified 2026-06-17.