How many CVEs does ASR have?

ASR has 22 published CVE records since 2023, including 14 in the last two years.

How many ASR CVEs are in CISA KEV?

None of ASR's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ASR products have the most CVEs?

The ASR products with the most published CVEs are Lapwing_Linux, Kestrel, Falcon_Linux, Falcon_Linux、Kestrel、Lapwing_Linux, Falcon.

What are the most common weakness types in ASR CVEs?

ASR's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-476 (NULL Pointer Dereference).

Are there public exploits for ASR vulnerabilities?

No ASR CVEs currently have a tracked public exploit in this dataset.

How many critical ASR vulnerabilities are there?

ASR has 4 critical and 6 high-severity CVEs.

What is the average severity of ASR CVEs?

The average CVSS base score across ASR's scored CVEs is 6.8.

RadicalNotion.AI

Log in Create an account

22 CVEs

ASR Vulnerabilities

Name: ASR vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ASR.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.8

Avg CVSS

2023–2026

Overview

ASR has 22 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

Security scorecard

A quick read on ASR's vulnerability posture, as a share of its 22 published CVEs.

Average CVSS: 6.8
Critical / high: 45%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 86%

Severity and exploitation

How the CVSS severity of ASR's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High6

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ASR's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ASR CVEs currently have a tracked public exploit.

Most affected products

The ASR products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ASR CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ASR CVE records.

ASR22 CVEs

Disclosure activity by year

How many ASR CVEs were published each year.

2023

3

2024

5

2025

11

2026

3

Latest ASR CVEs

The most recently disclosed vulnerabilities affecting ASR.

Deference after null check in as_rrc
CWE-476
High · CVSS 7.4
EPSS 0.2%2026-09-23
Deference after null check in ims_client sip
CWE-476
High · CVSS 7.4
EPSS 0.3%2026-04-30
Out-of-bounds read in ulp
CWE-125
Critical · CVSS 9.8
EPSS 0.4%2026-04-30
Out-of-bounds Read in nr flc
CWE-125
High · CVSS 7.4
EPSS 0.2%2025-11-26
Resource leaks in tr069
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01
Resource leaks in tr069
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01
Resource leaks in router
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01
Out-of-bounds access in lte-telephony
CWE-125
Critical · CVSS 9.1
EPSS 0.3%2025-07-01
Resource leaks in router
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01
Out-of-bounds write in lte-telephony
CWE-787
Critical · CVSS 9.8
EPSS 0.3%2025-07-01
Resource leaks in traffic_stat
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01
Resource leaks in router
CWE-404
Medium · CVSS 5.4
EPSS 0.3%2025-07-01

Get an alert for each new ASR CVE, with AI-written analysis and remediation steps.

Monitor ASR CVEs

Other vendors

CVE counts for other vendors.

microsoft42,015 CVEs linux25,264 CVEs Google17,495 CVEs Apple15,508 CVEs Oracle13,348 CVEs Debian10,234 CVEs IBM9,452 CVEs Red Hat8,588 CVEs

Browse all vendors

Frequently asked questions

Common questions about ASR vulnerabilities.

How many CVEs does ASR have?: ASR has 22 published CVE records since 2023, including 14 in the last two years.
How many ASR CVEs are in CISA KEV?: None of ASR's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ASR products have the most CVEs?: The ASR products with the most published CVEs are Lapwing_Linux, Kestrel, Falcon_Linux, Falcon_Linux、Kestrel、Lapwing_Linux, Falcon.
What are the most common weakness types in ASR CVEs?: ASR's CVEs most often map to these CWE weakness types: CWE-404 (Improper Resource Shutdown or Release), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-476 (NULL Pointer Dereference).
Are there public exploits for ASR vulnerabilities?: No ASR CVEs currently have a tracked public exploit in this dataset.
How many critical ASR vulnerabilities are there?: ASR has 4 critical and 6 high-severity CVEs.
What is the average severity of ASR CVEs?: The average CVSS base score across ASR's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ASR vulnerabilities

Get an alert for each new ASR CVE, with AI-written analysis and remediation steps.

Create an account See pricing