Denial of Service Vulnerability in STMicroelectronics X-CUBE-AZRTOS-WL
CVE-2024-50384
6.5MEDIUM
What is CVE-2024-50384?
A denial of service vulnerability exists in the HTTP server functionality of STMicroelectronics' X-CUBE-AZRTOS-WL. By sending a specially crafted network packet, an attacker can exploit this flaw, potentially leading to service disruption. This issue specifically affects version 2.0.0 of X-CUBE-AZRTOS-WL and the NetX Duo Web Component HTTP server version 1.1.0. The vulnerable implementation is located in the file designated for handling HTTP requests.
Affected Version(s)
X-CUBE-AZRT-H7RS 1.0.0
X-CUBE-AZRTOS-F4 1.1.0
X-CUBE-AZRTOS-F7 1.1.0