ASR vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ASR products: 2 record(s), with severity, exploitation and fixes.

Lapwing Linux 1 Kestrel 1

Exploited only (KEV) →

CVE-2026-42799 Critical · 9.8 CWE-125 Apr 30, 2026

Out-of-bounds read in ulp

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.

CVE-2025-13735 High · 7.4 CWE-125 Nov 26, 2025

Out-of-bounds Read in nr flc

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.