CVE-2024-50596
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 2, 2025
CWE ID 191
Summary
CVE-2024-50596 is an integer underflow vulnerability affecting STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0's HTTP server PUT request functionality. A maliciously crafted network packet can exploit this issue, leading to a denial of service. This vulnerability resides in the NetX Duo Web Component HTTP Server implementation located at x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.