CVE-2024-50595
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST
etxduo\addons\http
xd_http_server.c
*Credits:
Discovered by Kelly Patterson of Cisco Talos.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-10-25 CVE Reserved
- 2025-04-02 CVE Published
- 2025-04-02 CVE Updated
- 2025-04-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-191: Integer Underflow (Wrap or Wraparound)
CAPEC
References (1)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRT-H7RS Search vendor "STMicroelectronics" for product "X-CUBE-AZRT-H7RS" | 1.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRT-H7RS" and version "1.0.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-F4 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-F4" | 1.1.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-F4" and version "1.1.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-F7 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-F7" | 1.1.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-F7" and version "1.1.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-G0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-G0" | 1.1.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-G0" and version "1.1.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-G4 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-G4" | 2.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-G4" and version "2.0.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-H7 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-H7" | 3.3.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-H7" and version "3.3.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-L4 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-L4" | 2.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-L4" and version "2.0.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-L5 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-L5" | 2.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-L5" and version "2.0.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-WB Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-WB" | 2.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-WB" and version "2.0.0" | en |
Affected
| ||||||
| STMicroelectronics Search vendor "STMicroelectronics" | X-CUBE-AZRTOS-WL Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-WL" | 2.0.0 Search vendor "STMicroelectronics" for product "X-CUBE-AZRTOS-WL" and version "2.0.0" | en |
Affected
| ||||||