← CVE Intelligence

CVE-2024-50385

STMicroelectronics / X-CUBE-AZRT-H7RS PUBLISHED

Description (CNA)

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c

Affected (CNA)

Vendor / productVersions
STMicroelectronics / X-CUBE-AZRT-H7RSaffected 1.0.0
STMicroelectronics / X-CUBE-AZRTOS-F4affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-F7affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-G0affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-G4affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-H7affected 3.3.0
STMicroelectronics / X-CUBE-AZRTOS-L4affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-L5affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-WBaffected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-WLaffected 2.0.0

CWE

CWE-459

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.