VulnerabilityDeferred

CVE-2025-13735

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules).

HIGH 7.4EPSS 0.20%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.

CVSS 3.1: 7.4 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Weakness: CWE-125
Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

References

https://www.asrmicro.com/en/goods/psirt?cid=41

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.