Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-50384

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead t

Description

A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

STMicroelectronics X-CUBE-AZRT-H7RS

  • 1.0.0affected

STMicroelectronics X-CUBE-AZRTOS-F4

  • 1.1.0affected

STMicroelectronics X-CUBE-AZRTOS-F7

  • 1.1.0affected

STMicroelectronics X-CUBE-AZRTOS-G0

  • 1.1.0affected

STMicroelectronics X-CUBE-AZRTOS-G4

  • 2.0.0affected

STMicroelectronics X-CUBE-AZRTOS-H7

  • 3.3.0affected

STMicroelectronics X-CUBE-AZRTOS-L4

  • 2.0.0affected

STMicroelectronics X-CUBE-AZRTOS-L5

  • 2.0.0affected

STMicroelectronics X-CUBE-AZRTOS-WB

  • 2.0.0affected

STMicroelectronics X-CUBE-AZRTOS-WL

  • 2.0.0affected

References