{"cve":"CVE-2026-42801","enrichment":{"affected":[{"configurations":[{"platform":["linux"],"status":"unaffected","versions":{"scheme":"generic","value":"[0,2026/9/20)"}}],"enrichment":{"confidence":100.0,"confidence_source":"manual","scores":[{"score":100.0,"source":"manual"}]},"original":{"product":"Crane，Falcon","source":"cna","vendor":"ASR"},"product":"crane,falcon","vendor":"asr"}],"created":"2026-09-23T14:30:06.232983+00:00","updated":"2026-09-23T15:36:55.698632+00:00","vendors":["asr","asr$PRODUCT$crane,falcon"]},"epss":{"score":0.00284},"mitre":{"cpes":[],"created":"2026-09-23T09:03:56.690000+00:00","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/42xxx/CVE-2026-42801.json","references":["https://www.asrmicro.com/en/goods/psirt?cid=45"],"title":"Deference after null check in as_rrc","updated":"2026-09-23T15:25:17.517000+00:00","vendors":[],"weaknesses":["CWE-476"]},"nvd":{"cpes":[],"created":"2026-09-23T09:17:08.727000+00:00","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-42801.json","references":["https://www.asrmicro.com/en/goods/psirt?cid=45"],"title":null,"updated":"2026-09-23T17:58:00.627000+00:00","vendors":[],"weaknesses":["CWE-476"]},"opencve":{"changes":[{"created":"2026-09-23T11:45:00+00:00","data":[{"details":{"new":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","old":null},"type":"description"},{"details":{"new":"Deference after null check in as_rrc","old":null},"type":"title"},{"details":{"added":["CWE-476"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://www.asrmicro.com/en/goods/psirt?cid=45"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"9c61d0bf-effc-49e6-bef3-fac8ac7d1087"},{"created":"2026-09-23T16:00:00+00:00","data":[{"details":["asr","asr$PRODUCT$crane,falcon"],"type":"first_time"},{"details":{"added":["asr","asr$PRODUCT$crane,falcon"],"removed":[]},"type":"vendors"}],"id":"3e89a421-7a7e-4d24-a79e-2c0d05b82d5f"},{"created":"2026-09-23T16:30:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"46a98528-30e7-48c2-bc07-c046c1fa4b15"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2026-09-23T09:03:56.690000+00:00","provider":"mitre"},"description":{"data":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00284},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://www.asrmicro.com/en/goods/psirt?cid=45"],"providers":["mitre","nvd"]},"title":{"data":"Deference after null check in as_rrc","provider":"mitre"},"updated":{"data":"2026-09-23T16:16:43.290000+00:00","provider":"nvd"},"vendors":{"data":["asr","asr$PRODUCT$crane,falcon"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-476"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2026-09-23T09:03:56.690000+00:00","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"Deference after null check in as_rrc","updated":"2026-09-23T15:25:13.747000+00:00","vendors":[],"vulnrichment_repo_path":"2026/42xxx/CVE-2026-42801.json","weaknesses":[]}}