CVE-2024-50384: High severity stmicroelectronics x-cube-azrtos-wl vulnerability
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nxwebhttpserver.c
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50384?
CVE-2024-50384 has a high severity rating due to its potential for causing denial of service.
How do I fix CVE-2024-50384?
To fix CVE-2024-50384, ensure that you update to the latest version of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.1 or later, which addresses this vulnerability.
What impact does CVE-2024-50384 have on STMicroelectronics X-CUBE-AZRTOS-WL?
CVE-2024-50384 allows attackers to send specially crafted packets that can crash the HTTP server, resulting in a denial of service.
Is CVE-2024-50384 exploitable over the internet?
Yes, CVE-2024-50384 can be potentially exploited over the internet if the affected components are exposed.
Who is affected by CVE-2024-50384?
CVE-2024-50384 affects users of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0 and STMicroelectronics X-CUBE-AZRTOS-F7 NetX Duo Web Component.