We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
Reserved 2024-10-25 | Published 2025-04-02 | Updated 2025-04-02 | Assigner talosCWE-191: Integer Underflow (Wrap or Wraparound)
Discovered by Kelly Patterson of Cisco Talos.
talosintelligence.com/vulnerability_reports/TALOS-2024-2102
Support options
