CVE-2024-50384

MEDIUM6.5

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2

Published Apr 2, 2025

Modified 4 months ago

Details

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c

References

WEB

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2097

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-50384

WEB

https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2097

CVSS Analysis

CVSS v3.1

6.5

Exploitability

Attack Vector