CVE-2024-42385 — Improper Neutralization of Delimiters in Mongoose Web Server library

CVE-2024-42385

Improper Neutralization of Delimiters in Mongoose Web Server library PUBLISHED

Description (CNA)

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Affected (CNA)

Vendor / product	Versions
Cesanta / Mongoose Web Server	affected 0 through 7.14

CWE

CWE-140

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42385

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.

https://cert-portal.siemens.com/productcert/html/ssa-142885.html