Maple Labs

CVE search · CVE-2024-50385

CVE-2024-50385

high 7.5

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
talos-cna@cisco.com
Weakness
CWE-459, NVD-CWE-noinfo

Severity

VersionScoreVectorSource
CVSS 3.1 medium 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H talos-cna@cisco.comSecondary
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • st · x-cube-azrt-h7rs
  • st · x-cube-azrtos-f4
  • st · x-cube-azrtos-f7
  • st · x-cube-azrtos-g0
  • st · x-cube-azrtos-g4
  • st · x-cube-azrtos-h7
  • st · x-cube-azrtos-l4
  • st · x-cube-azrtos-l5
  • st · x-cube-azrtos-wb
  • st · x-cube-azrtos-wl

References