CVE-2024-32625

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

5.8

EPSS

0.42%

Published

Apr 16, 2024

Modified

Dec 10, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Weaknesses (CWE)

CWE-457

Affected Products (26)

asrmicro · asr1806_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1806

asrmicro · asr1803_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1803

asrmicro · asr1606_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1606

asrmicro · asr1603_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1603

asrmicro · asr1602_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1602

asrmicro · asr1605_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1605

asrmicro · asr1609_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1609

asrmicro · asr3607_firmware (up to cp01.057.067)vulnerable

asrmicro · asr3607

asrmicro · asr3605_firmware (up to cp01.057.067)vulnerable

asrmicro · asr3605

asrmicro · asr3602_firmware (up to cp01.057.067)vulnerable

asrmicro · asr3602

asrmicro · asr1803sc_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1803sc

asrmicro · asr1607_firmware (up to cp01.057.067)vulnerable

asrmicro · asr1607

asrmicro · asr3603_firmware (up to cp01.057.067)vulnerable

asrmicro · asr3603

References (2)

https://www.asrmicro.com/en/goods/psirt?cid=38

Vendor Advisory

https://www.asrmicro.com/en/goods/psirt?cid=38

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs