CVE-2024-32634: Asrmicro ASR1602 Firmware

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

Affected products

• Asrmicro ASR1602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1606 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1607 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1609 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1803SC Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR1806 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3602 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3603 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3605 Firmware: before cp01.057.067 (fixed in cp01.057.067)
• Asrmicro ASR3607 Firmware: before cp01.057.067 (fixed in cp01.057.067)

Published 2024-04-16. Last modified 2026-06-17.