Maple Labs

CVE search · CVE-2024-45064

CVE-2024-45064

critical 9.8

A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
talos-cna@cisco.com
Weakness
CWE-119

Severity

VersionScoreVectorSource
CVSS 3.1 high 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H talos-cna@cisco.comSecondary
CVSS 3.1 critical 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • st · x-cube-azrt-h7rs
  • st · x-cube-azrtos-f4
  • st · x-cube-azrtos-f7
  • st · x-cube-azrtos-g0
  • st · x-cube-azrtos-g4
  • st · x-cube-azrtos-h7
  • st · x-cube-azrtos-l4
  • st · x-cube-azrtos-l5
  • st · x-cube-azrtos-wb
  • st · x-cube-azrtos-wl

References