← CVE Intelligence

CVE-2024-50596

STMicroelectronics / X-CUBE-AZRT-H7RS PUBLISHED

Description (CNA)

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c

Affected (CNA)

Vendor / productVersions
STMicroelectronics / X-CUBE-AZRT-H7RSaffected 1.0.0
STMicroelectronics / X-CUBE-AZRTOS-F4affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-F7affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-G0affected 1.1.0
STMicroelectronics / X-CUBE-AZRTOS-G4affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-H7affected 3.3.0
STMicroelectronics / X-CUBE-AZRTOS-L4affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-L5affected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-WBaffected 2.0.0
STMicroelectronics / X-CUBE-AZRTOS-WLaffected 2.0.0

CWE

CWE-191

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.