Resource Leak Exposure in ASR180x and ASR190x Routers from Cisco
CVE-2025-49488

5.4MEDIUM

Key Information:

Vendor

Asr

Status
Falcon Linux、kestrel、lapwing Linux
Vendor
CVE Published:
1 July 2025

What is CVE-2025-49488?

Cisco ASR180x and ASR190x routers are susceptible to a vulnerability characterized by improper resource shutdown or release. This issue permits resource leak exposure, which may lead to unauthorized access or degradation of service in affected systems. The vulnerability is related to program files in router components, specifically router/phonebook/pb.c, and impacts Falcon_Linux, Kestrel, and Lapwing_Linux versions prior to v1536. It is crucial for users of these routers to assess their configurations and implement appropriate security measures to mitigate potential risks.

Affected Version(s)

Falcon_Linux、Kestrel、Lapwing_Linux Linux 0

References

https://www.asrmicro.com/en/goods/psirt?cid=40

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49488 : Resource Leak Exposure in ASR180x and ASR190x Routers from Cisco