CVE-2024-32633
Unsigned compared against 0
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Unsigned compared against 0
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
- Record
CVE-2024-32633- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L - Weakness
- CWE-570
- Updated
- 2026-11-02
EUVDEUVD-2024-30435
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
- Record
EUVD-2024-30435- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9m2p-fj6h-mrv7
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
- Record
GHSA-9m2p-fj6h-mrv7- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L - Weakness
- CWE-570
- Updated
- 2026-11-02
NVD
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
- Record
CVE-2024-32633- CVSS 3.1
- 4.0 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L - Weakness
- CWE-570
- Updated
- 2026-11-02
Affected products
- asr falcon/crane
- asrmicro asr1602 firmware
- asrmicro asr1603 firmware
- asrmicro asr1605 firmware
- asrmicro asr1606 firmware
- asrmicro asr1607 firmware
- asrmicro asr1609 firmware
- asrmicro asr1803 firmware
- asrmicro asr1803sc firmware
- asrmicro asr1806 firmware
- asrmicro asr3602 firmware
- asrmicro asr3603 firmware
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-32633 is a medium vulnerability (CVSS 4.0) in Asr Falcon/crane, published April 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. No source names a fixed version.