Resource Leak Vulnerability in ASR180x Router by ASR Micro
CVE-2025-49490

5.4MEDIUM

Key Information:

Vendor

Asr

Status
Falcon Linux、kestrel、lapwing Linux
Vendor
CVE Published:
1 July 2025

What is CVE-2025-49490?

The ASR180x router contains a resource leak vulnerability that can lead to exposure of sensitive resources. This issue arises from flaws in the program files associated with router management, specifically within router/sms/sms.c. Due to this vulnerability, affected devices running Falcon_Linux, Kestrel, and Lapwing_Linux prior to version 1536 are at risk of network instability and potential exploitation. It is crucial for users to evaluate their systems and implement necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Falcon_Linux、Kestrel、Lapwing_Linux Linux 0

References

https://www.asrmicro.com/en/goods/psirt?cid=40

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49490 : Resource Leak Vulnerability in ASR180x Router by ASR Micro