An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
X-CUBE-AZRT-H7RS
Vendor
STMicroelectronics
Product
X-CUBE-AZRT-H7RS
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRT-H7RS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-F4
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-F4
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-F4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-F7
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-F7
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-F7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-G0
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-G0
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-G0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-G4
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-G4
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-G4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-H7
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-H7
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-H7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.3.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-L4
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-L4
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-L4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-L5
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-L5
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-L5 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-WB
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-WB
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-WB · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
X-CUBE-AZRTOS-WL
Vendor
STMicroelectronics
Product
X-CUBE-AZRTOS-WL
Platforms
Unknown
Default status
Unknown
X-CUBE-AZRTOS-WL · Scoped product and version facts