CVE-2024-50596
02.04.2025, 14:15
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c
| Vendor | Product | Version |
|---|---|---|
| st | x-cube-azrt-h7rs | 1.0.0 |
| st | x-cube-azrtos-f4 | 1.1.0 |
| st | x-cube-azrtos-f7 | 1.1.0 |
| st | x-cube-azrtos-g0 | 1.1.0 |
| st | x-cube-azrtos-g4 | 2.0.0 |
| st | x-cube-azrtos-h7 | 3.3.0 |
| st | x-cube-azrtos-l4 | 2.0.0 |
| st | x-cube-azrtos-l5 | 2.0.0 |
| st | x-cube-azrtos-wb | 2.0.0 |
| st | x-cube-azrtos-wl | 2.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration