CVE-2024-45064

A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
talosCNA
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
stx-cube-azrt-h7rs
1.0.0
stx-cube-azrtos-f4
1.1.0
stx-cube-azrtos-f7
1.1.0
stx-cube-azrtos-g0
1.1.0
stx-cube-azrtos-g4
2.0.0
stx-cube-azrtos-h7
3.3.0
stx-cube-azrtos-l4
2.0.0
stx-cube-azrtos-l5
2.0.0
stx-cube-azrtos-wb
2.0.0
stx-cube-azrtos-wl
2.0.0
𝑥
= Vulnerable software versions