FRRouting Project FRRouting

Name: FRRouting Project FRRouting
Brand: FRRouting Project

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical6high4medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-41909US	high7.5	1.12% (66th)	—	no fix	2023-09-05	≤ 9.0
CVE-2023-46752US	medium5.9	1.02% (63rd)	—	no fix	2023-10-26	≤ 9.0.1
CVE-2023-46753US	medium5.9OT elevated	0.94% (61st)	—	no fix	2023-10-26	≤ 9.0.1
CVE-2023-38406US	critical9.8	0.94% (61st)	—	8.4.3	2023-11-06	< 8.4.3
CVE-2023-38407US	high7.5	0.93% (60th)	—	8.5	2023-11-06	< 8.5
CVE-2023-47234US	high7.5	0.91% (60th)	—	8.5	2023-11-03	2 versions
CVE-2024-55553US	—	0.85% (58th)	—	10.3	2025-01-06	4 versions
CVE-2024-31948US	—	0.83% (57th)	—	no fix	2024-04-07	≤ 9.1
CVE-2023-3748US	high7.5	0.78% (56th)	—	8.5	2023-07-24	< 8.5
CVE-2024-31949US	—	0.70% (53rd)	—	no fix	2024-04-07	≤ 9.1
CVE-2024-34088US	—	0.69% (53rd)	—	no fix	2024-04-30	≤ 9.1
CVE-2023-47235US	high7.5	0.69% (52nd)	—	8.5	2023-11-03	2 versions
CVE-2024-44070US	high7.5	0.64% (51st)	—	no fix	2024-08-19	≤ 10.1
CVE-2025-61107US	—	0.64% (50th)	—	no fix	2025-10-28	≤ v10.4.1
CVE-2025-61106US	—	0.64% (50th)	—	no fix	2025-10-28	≤ v10.4.1
CVE-2025-61104US	—	0.64% (50th)	—	no fix	2025-10-28	≤ v10.4.1
CVE-2025-61103US	—	0.64% (50th)	—	no fix	2025-10-28	≤ v10.4.1
CVE-2024-31951US	—	0.55% (46th)	—	no fix	2024-04-07	≤ 9.1
CVE-2024-31950US	—	0.51% (44th)	—	no fix	2024-04-07	≤ 9.1
CVE-2025-61105US	—	0.50% (43rd)	—	no fix	2025-10-27	≤ v10.4.1
CVE-2025-61102US	—	0.50% (43rd)	—	no fix	2025-10-27	≤ v10.4.1
CVE-2025-61101US	—	0.50% (43rd)	—	no fix	2025-10-27	≤ v10.4.1
CVE-2025-61100US	—	0.50% (43rd)	—	no fix	2025-10-27	≤ v10.4.1
CVE-2025-61099US	—	0.50% (43rd)	—	no fix	2025-10-27	≤ v10.4.1
CVE-2026-37457US	—	0.39% (33rd)	—	10.5.3	2026-05-01	< 10.5.3
CVE-2026-37459US	—	0.37% (31st)	—	no fix	2026-05-04	≤ 10.6
CVE-2024-27913US	medium6.5	0.32% (25th)	—	no fix	2024-02-28	≤ 9.1
CVE-2026-5107US	medium4.2	0.28% (21st)	—	no fix	2026-03-30	≤ 10.5.1
CVE-2026-37458US	—	0.25% (16th)	—	no fix	2026-05-04	≤ 10.6
CVE-2026-28532US	—	0.22% (13th)	—	10.5.3	2026-04-30	< 10.5.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference11 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan