CVE-2024-50597: Integer Underflow
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxdhttpserver.c
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50597?
CVE-2024-50597 is classified as a denial of service vulnerability that can significantly impact affected systems.
How do I fix CVE-2024-50597?
To remediate CVE-2024-50597, update to the latest version of STMicroelectronics X-CUBE-AZRTOS-WL or apply the recommended patches.
What products are affected by CVE-2024-50597?
CVE-2024-50597 affects STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0 and the NetX Duo Component HTTP Server.
How can an attacker exploit CVE-2024-50597?
An attacker can exploit CVE-2024-50597 by sending a specially crafted network packet to trigger the integer underflow vulnerability.
What are the potential consequences of CVE-2024-50597?
The potential consequences of CVE-2024-50597 include denial of service, leading to disruption of the affected HTTP server functionalities.