Asrmicro vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Asrmicro products: 2 record(s), with severity, exploitation and fixes.

Asr1803 Firmware 1 Asr1901 Firmware 1 Asr1903 Firmware 1

Exploited only (KEV) →

CVE-2026-42800 Medium · 5.3 CWE-476 Apr 30, 2026

Deference after null check in ims_client sip

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c.

CVE-2026-42799 Critical · 9.8 CWE-125 Apr 30, 2026

Out-of-bounds read in ulp

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.