| Package | Affected versions | Patched versions |
|---|---|---|
| x-cube-azrt-h7rs | = 1.0.0 | |
| x-cube-azrtos-f4 | = 1.1.0 | |
| x-cube-azrtos-f7 | = 1.1.0 | |
| x-cube-azrtos-g0 | = 1.1.0 | |
| x-cube-azrtos-g4 | = 2.0.0 | |
| x-cube-azrtos-h7 | = 3.3.0 | |
| x-cube-azrtos-l4 | = 2.0.0 | |
| x-cube-azrtos-l5 | = 2.0.0 | |
| x-cube-azrtos-wb | = 2.0.0 | |
| x-cube-azrtos-wl | = 2.0.0 |
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free