PT-2025-27513 · Asr180X+2 · Asr180X+3

Published 2025-07-01 · Updated 2025-12-22 · CVE-2025-49490

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Falcon Linux versions prior to v1536 Kestrel versions prior to v1536 Lapwing Linux versions prior to v1536 ASR180x (affected versions not specified)

Description: The issue is related to a resource leak vulnerability in the ASR180x router, allowing resource leak exposure. This vulnerability is associated with program files in router/sms/sms.c.

Recommendations: For Falcon Linux versions prior to v1536, update to version v1536 or later. For Kestrel versions prior to v1536, update to version v1536 or later. For Lapwing Linux versions prior to v1536, update to version v1536 or later. For ASR180x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-07946

CVE-2025-49490

Affected Products

Asr180X

Falcon Linux

Kestrel

Lapwing Linux

References · 8

• https://bdu.fstec.ru/vul/2025-07946 · Security Note
• https://asrmicro.com/en/goods/psirt?cid=40 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49490 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49490 · Vendor Advisory
• https://t.me/cvenotify/127212 · Telegram Post
• https://t.me/cvetracker/27495 · Telegram Post
• https://twitter.com/CVEnew/status/1939991835255939480 · Twitter Post
• https://t.me/cveNotify/146553 · Telegram Post