CVE-2024-50385
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 2, 2025
CWE ID 459
Summary
CVE-2024-50385 is a denial-of-service vulnerability affecting the NetX Component HTTP server functionality in STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A carefully crafted network packet can trigger this issue, leading to denial of service. The X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v1.1.0, located in the file x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c, is the affected implementation. An attacker can exploit this vulnerability by sending a malicious packet to the target system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.