fkie_nvd - fkie_cve-2025-49488

fkie_cve-2025-49488

Vulnerability from fkie_nvd

Published

2025-07-01 11:15

Modified

2025-07-03 15:14

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Summary

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

References

▼	URL	Tags
	68630edc-a58c-4cbd-9b01-0e130455c8ae	https://www.asrmicro.com/en/goods/psirt?cid=40

Impacted products

	Vendor	Product	Version

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Resource Shutdown or Release vulnerability in ASR180x \u3001ASR190x in router \n\ncomponents\n\n allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c.\n\nThis issue affects Falcon_Linux\u3001Kestrel\u3001Lapwing_Linux: before v1536."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de apagado o liberaci\u00f3n incorrecta de recursos en ASR180x y ASR190x en componentes del enrutador permite la exposici\u00f3n a fugas de recursos. Esta vulnerabilidad est\u00e1 asociada a los archivos de programa router/phonebook/pb.c. Este problema afecta a Falcon_Linux, Kestrel y Lapwing_Linux anteriores a la versi\u00f3n 1536."
    }
  ],
  "id": "CVE-2025-49488",
  "lastModified": "2025-07-03T15:14:12.767",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.5,
        "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-07-01T11:15:20.790",
  "references": [
    {
      "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
      "url": "https://www.asrmicro.com/en/goods/psirt?cid=40"
    }
  ],
  "sourceIdentifier": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-404"
        }
      ],
      "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
      "type": "Secondary"
    }
  ]
}

CVE-2025-49488 (GCVE-0-2025-49488)

Vulnerability from cvelistv5

Published

2025-07-01 11:03

Modified

2025-07-01 14:29

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-404 - Improper Resource Shutdown or Release

Summary

Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

References

▼	URL	Tags
	https://www.asrmicro.com/en/goods/psirt?cid=40

Impacted products

	Vendor	Product	Version
	ASR	Falcon_Linux、Kestrel、Lapwing_Linux	Version: 0 < v1536

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-49488",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-01T14:28:59.638485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-01T14:29:14.837Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "router"
          ],
          "platforms": [
            "Linux"
          ],
          "product": "Falcon_Linux\u3001Kestrel\u3001Lapwing_Linux",
          "programFiles": [
            "router/phonebook/pb.c"
          ],
          "vendor": "ASR",
          "versions": [
            {
              "lessThan": "v1536",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2025-07-01T11:02:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Resource Shutdown or Release vulnerability in ASR180x \u3001ASR190x in router \n\n\u003cspan style=\"background-color: rgb(244, 249, 250);\"\u003ecomponents\u003c/span\u003e\n\n allows Resource Leak Exposure.\u003cp\u003e This vulnerability is associated with program files \u003ctt\u003erouter/phonebook/pb.c\u003c/tt\u003e.\u003c/p\u003e\u003cp\u003eThis issue affects Falcon_Linux\u3001Kestrel\u3001Lapwing_Linux: before v1536.\u003c/p\u003e"
            }
          ],
          "value": "Improper Resource Shutdown or Release vulnerability in ASR180x \u3001ASR190x in router \n\ncomponents\n\n allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c.\n\nThis issue affects Falcon_Linux\u3001Kestrel\u3001Lapwing_Linux: before v1536."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-131",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-131 Resource Leak Exposure"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "CWE-404 Improper Resource Shutdown or Release",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-01T11:03:17.990Z",
        "orgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
        "shortName": "ASR"
      },
      "references": [
        {
          "url": "https://www.asrmicro.com/en/goods/psirt?cid=40"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Resource leaks in router",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "68630edc-a58c-4cbd-9b01-0e130455c8ae",
    "assignerShortName": "ASR",
    "cveId": "CVE-2025-49488",
    "datePublished": "2025-07-01T11:03:17.990Z",
    "dateReserved": "2025-06-06T02:42:06.643Z",
    "dateUpdated": "2025-07-01T14:29:14.837Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.