{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-14T21:38:22.686","vulnerabilities":[{"cve":{"id":"CVE-2024-50594","sourceIdentifier":"talos-cna@cisco.com","published":"2025-04-02T14:15:43.773","lastModified":"2025-11-03T20:16:37.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\\Middlewares\\ST\\netxduo\\addons\\web\\nx_web_http_server.c"},{"lang":"es","value":"Existe una vulnerabilidad de bajo flujo de enteros en el servidor HTTP, poner la funcionalidad de solicitud de STMicroelectronics X-Cube-Azrtos-WL 2.0.0. Una serie especialmente manipulado de solicitudes de red puede conducir a la negación del servicio. Un atacante puede enviar una secuencia de paquetes maliciosos para desencadenar esta vulnerabilidad. Esta vulnerabilidad afecta la implementación del servidor HTTP de componente web NetX Duo que se puede encontrar en X-Cube-Azrtos-F7 \\ MiddleWares \\ ST \\ NetXDUO \\ Addons \\ Web \\ nx_web_http_server.c.C"}],"metrics":{"cvssMetricV31":[{"source":"talos-cna@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"talos-cna@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-191"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrt-h7rs:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4C5F8DB8-6A3C-492D-8B9D-2211A3FB2C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-f4:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A69A0188-96F6-40C7-A2BE-8760297E6249"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-f7:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FF242900-643B-444B-9DE7-0373C810EA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-g0:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CEE45297-82B1-4E0B-85DF-4A3C4EEC0391"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-g4:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D14B5944-7E42-45CD-8053-276C8787FC10"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-h7:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F44785CF-9D3D-44AB-8E92-50C9471C6481"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-l4:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B78921-0E36-459A-AC17-94AC6AF8847F"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-l5:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"58BA08A3-2A44-43CF-8302-082E44D1B070"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-wb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"163D6B0F-2A31-401D-A1CD-EC77357767BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:st:x-cube-azrtos-wl:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3CD0D34C-C260-4DC4-99A9-24F4C610C710"}]}]}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2024-2102","source":"talos-cna@cisco.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}