CVE-2024-32631: Out-of-bounds read in telephony
Published Apr 16, 2024
·Updated
Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
Affected Software
26 affected components
All of the following
Asrmicro Asr3603 Firmware<cp01.057.067
Asrmicro Asr3603
All of the following
Asrmicro Asr1607 Firmware<cp01.057.067
Asrmicro Asr1607
All of the following
Asrmicro Asr1803sc Firmware<cp01.057.067
Asrmicro Asr1803sc
All of the following
Asrmicro Asr3602 Firmware<cp01.057.067
Asrmicro Asr3602
All of the following
Asrmicro Asr3605 Firmware<cp01.057.067
Asrmicro Asr3605
All of the following
Asrmicro Asr3607 Firmware<cp01.057.067
Asrmicro Asr3607
All of the following
Asrmicro Asr1609 Firmware<cp01.057.067
Asrmicro Asr1609
All of the following
Asrmicro Asr1605 Firmware<cp01.057.067
Asrmicro Asr1605
All of the following
Asrmicro Asr1602 Firmware<cp01.057.067
Asrmicro Asr1602
All of the following
Asrmicro Asr1603 Firmware<cp01.057.067
Asrmicro Asr1603
All of the following
Asrmicro Asr1606 Firmware<cp01.057.067
Asrmicro Asr1606
All of the following
Asrmicro Asr1803 Firmware<cp01.057.067
Asrmicro Asr1803
All of the following
Asrmicro Asr1806 Firmware<cp01.057.067
Asrmicro Asr1806
Event History
Apr 16, 2024
CVE Published
via MITRE·08:44 AM
Data Sourced
via MITRE·08:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32631?
CVE-2024-32631 has been classified as a serious vulnerability that can lead to incorrect computations due to an out-of-bounds read.
2
How do I fix CVE-2024-32631?
To address CVE-2024-32631, update the firmware of the affected ASRMicro devices to the latest version beyond cp01.057.067.
3
What devices are affected by CVE-2024-32631?
CVE-2024-32631 affects multiple ASRMicro devices including ASR1803, ASR1803SC, ASR1602, and others that run firmware versions up to cp01.057.067.
4
What are the potential impacts of CVE-2024-32631?
The vulnerability can lead to incorrect computations in the affected ASRMicro devices, which may result in operational disruptions.
5
Where can I find more information about CVE-2024-32631?
Detailed information regarding CVE-2024-32631 can be found on ASRMicro's official resources and advisories.