CVE-2023-49699 - OpenCVE

Memory Corruption in IMS while calling VoLTE Streamingmedia Interface

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Asrmicro	Asr1803 Firmware Asr1806 Firmware Asr1806 Asr1803

Configuration 1 [-]

AND

cpe:2.3:o:asrmicro:asr1806_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:asrmicro:asr1806:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:asrmicro:asr1803_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:asrmicro:asr1803:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.asrmicro.com/en/goods/psirt?cid=31	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ASR

Published: 2023-11-30T07:04:48.134Z

Updated: 2023-11-30T07:04:48.134Z

Reserved: 2023-11-30T01:28:05.185Z

Link: CVE-2023-49699

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-11-30T07:15:09.543

Modified: 2023-12-05T17:47:31.420

Link: CVE-2023-49699

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asrmicro:asr1806_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "858FE520-4517-470F-930B-6D3AE1BC3ECC", "versionEndExcluding": "cp01.057.063", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asrmicro:asr1806:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9465207-5C99-406B-824E-B735FEDAA22D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asrmicro:asr1803_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "68962B38-8E5A-4AFD-8A73-0448A8647CED", "versionEndExcluding": "cp01.057.063", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asrmicro:asr1803:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DCCB900-92E3-4060-B687-052F378AC304", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Memory Corruption in IMS while calling VoLTE Streamingmedia Interface "}, {"lang": "es", "value": "Corrupci\u00f3n de la memoria en IMS al llamar a la interfaz VoLTE Streamingmedia"}], "id": "CVE-2023-49699", "lastModified": "2023-12-05T17:47:31.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.4, "impactScore": 4.7, "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "type": "Secondary"}]}, "published": "2023-11-30T07:15:09.543", "references": [{"source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "tags": ["Vendor Advisory"], "url": "https://www.asrmicro.com/en/goods/psirt?cid=31"}], "sourceIdentifier": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-119"}], "source": "68630edc-a58c-4cbd-9b01-0e130455c8ae", "type": "Secondary"}]}