CVE-2024-50385: High severity stmicroelectronics x-cube-azrtos-wl vulnerability
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxdhttpserver.c
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50385?
CVE-2024-50385 is classified as a denial of service vulnerability with a significant impact on the affected systems.
How do I fix CVE-2024-50385?
To mitigate CVE-2024-50385, ensure that you apply the latest patches provided by STMicroelectronics for X-CUBE-AZRTOS-WL.
What products are affected by CVE-2024-50385?
CVE-2024-50385 affects STMicroelectronics X-CUBE-AZRTOS-WL and X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server.
What type of attack does CVE-2024-50385 involve?
CVE-2024-50385 involves an attacker sending specially crafted network packets to exploit the vulnerability and cause a denial of service.
Can CVE-2024-50385 be exploited remotely?
Yes, CVE-2024-50385 can be exploited remotely by an attacker sending malicious packets to the affected HTTP server.