CVE Alert: CVE-2024-50597

Vulnerability Summary: CVE-2024-50597

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c

Affected Endpoints:

• PUT request

Published Date:

4/2/2025, 2:15:44 PM

⚠️ CVSS Score:

Exploit Status:

Not Exploited

References:

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2103

Recommended Action:

No proposed action available. Please refer to vendor documentation for updates.

---