CVE Alert: CVE-2024-50594

Vulnerability Summary: CVE-2024-50594

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c

Affected Endpoints:

• PUT request

Published Date:

4/2/2025, 2:15:43 PM

⚠️ CVSS Score:

Exploit Status:

Not Exploited

References:

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2102

Recommended Action:

No proposed action available. Please refer to vendor documentation for updates.

---