CVE-2024-32634: Logically dead code
Published Apr 16, 2024
·Updated
In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
Affected Software
26 affected components
All of the following
Asrmicro Asr3603 Firmware<cp01.057.067
Asrmicro Asr3603
All of the following
Asrmicro Asr1607 Firmware<cp01.057.067
Asrmicro Asr1607
All of the following
Asrmicro Asr1803sc Firmware<cp01.057.067
Asrmicro Asr1803sc
All of the following
Asrmicro Asr3602 Firmware<cp01.057.067
Asrmicro Asr3602
All of the following
Asrmicro Asr3605 Firmware<cp01.057.067
Asrmicro Asr3605
All of the following
Asrmicro Asr3607 Firmware<cp01.057.067
Asrmicro Asr3607
All of the following
Asrmicro Asr1609 Firmware<cp01.057.067
Asrmicro Asr1609
All of the following
Asrmicro Asr1605 Firmware<cp01.057.067
Asrmicro Asr1605
All of the following
Asrmicro Asr1602 Firmware<cp01.057.067
Asrmicro Asr1602
All of the following
Asrmicro Asr1603 Firmware<cp01.057.067
Asrmicro Asr1603
All of the following
Asrmicro Asr1606 Firmware<cp01.057.067
Asrmicro Asr1606
All of the following
Asrmicro Asr1803 Firmware<cp01.057.067
Asrmicro Asr1803
All of the following
Asrmicro Asr1806 Firmware<cp01.057.067
Asrmicro Asr1806
Event History
Apr 16, 2024
CVE Published
via MITRE·08:57 AM
Data Sourced
via MITRE·08:57 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32634?
CVE-2024-32634 is classified with a low severity due to a logical contradiction that prevents the execution of vulnerable code.
2
How do I fix CVE-2024-32634?
To mitigate CVE-2024-32634, update the firmware to any version later than cp01.057.067.
3
Which devices are affected by CVE-2024-32634?
CVE-2024-32634 affects multiple Asrmicro devices using specific firmware versions such as Asr1602, Asr1803, and Asr3603 among others.
4
Is there a potential exploit for CVE-2024-32634?
Current assessments indicate that CVE-2024-32634 does not have a viable exploit due to the logical contradiction in the code.
5
What is the impact of CVE-2024-32634 on my network?
Given its low severity and the nature of the vulnerability, CVE-2024-32634 poses minimal risk to network security if the affected firmware is updated.