Lucene search

68630edc-a58c-4cbd-9b01-0e130455c8aeCVE-2024-32631

HistoryApr 16, 2024 - 9:15 a.m.

CVE-2024-32631

2024-04-1609:15:07

CWE-125

68630edc-a58c-4cbd-9b01-0e130455c8ae

web.nvd.nist.gov

cve-2024-32631

nvd

incorrect computations

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux",
      "RTOS"
    ],
    "product": "Falcon/Crane",
    "vendor": "ASR",
    "versions": [
      {
        "lessThan": "CP01.057.067",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.asrmicro.com/en/goods/psirt?cid=38

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-32631