Detections
Analytics
CVE-2024-50597
high
Description
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
References
https://blog.talosintelligence.com/eclipse-and-stmicroelectronics-vulnerabilities/
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2103
https://talosintelligence.com/vulnerability_reports/TALOS-2024-2103