This vulnerability involves a NULL pointer dereference in the ASR Crane, Falcon product on Linux within the as_rrc module, specifically in the source file 3g.mod/lib/src/urrsir.c. The flaw allows pointer manipulation that can lead to a crash or potentially other impacts on the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.4, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

Successful exploitation can lead to a denial of service or other impacts affecting confidentiality, integrity, and availability of the affected system. The vulnerability allows an attacker with low privileges to cause a NULL pointer dereference remotely without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor ASR vendor communications for updates. Until a fix is available, consider limiting access to the affected component and applying any recommended workarounds from the vendor.