Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

ASR180x and ASR190x Router Modules Leak Resources

CVE-2025-49481 · published 1 year ago
Summary

A security issue with the software used in certain router modules can cause resources to be left open, potentially allowing unauthorized access. This affects some versions of Falcon_Linux, Kestrel, and Lapwing_Linux routers. To fix this, update to a version of the software that is not affected, such as version 1536 or later.

What to do
  • Update asrmicro falcon_linux to version 1536 or later.
  • Update asrmicro kestrel to version 1536 or later.
  • Update asrmicro lapwing_linux to version 1536 or later.
Affected software
VendorProductAffected versions
asrmicro falcon_linux < 1536
cpe:2.3:o:asrmicro:falcon_linux:*:*:*:*:*:*:*:*
asrmicro kestrel < 1536
cpe:2.3:o:asrmicro:kestrel:*:*:*:*:*:*:*:*
asrmicro lapwing_linux < 1536
cpe:2.3:o:asrmicro:lapwing_linux:*:*:*:*:*:*:*:*
Original advisory text
Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-...
Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-queue.C.

This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-404Improper Resource Shutdown or Release
Timeline
Published1 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-49481 · NVD
Track software like this
Free during beta