Maple Labs

CVE search · CVE-2024-50594

CVE-2024-50594

high 7.5

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
talos-cna@cisco.com
Weakness
CWE-191

Severity

VersionScoreVectorSource
CVSS 3.1 medium 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L talos-cna@cisco.comSecondary
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • st · x-cube-azrt-h7rs
  • st · x-cube-azrtos-f4
  • st · x-cube-azrtos-f7
  • st · x-cube-azrtos-g0
  • st · x-cube-azrtos-g4
  • st · x-cube-azrtos-h7
  • st · x-cube-azrtos-l4
  • st · x-cube-azrtos-l5
  • st · x-cube-azrtos-wb
  • st · x-cube-azrtos-wl

References