Lucene search

ASRCVELIST:CVE-2024-32625

HistoryApr 16, 2024 - 9:00 a.m.

CVE-2024-32625 Uninitialized scalar field

2024-04-1609:00:52

CWE-457

ASR

www.cve.org

cve-2024-32625

offloadamrwriter

scalar field

arbitrary value

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

JSON

In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Falcon/Crane",
    "vendor": "ASR",
    "versions": [
      {
        "lessThan": "CP01.057.067",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.asrmicro.com/en/goods/psirt?cid=38

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-32625