PT-2021-20417
CVE-2021-34268
·
تاريخ النشر
2021-07-22
·
تاريخ التحديث
2021-08-03
الوصف من
CVSS 3.1
4.6
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
STMicroelectronics STM32Cube Middleware versions 1.8.0 and below
Description:
The issue is caused by a problem in the
USBH ParseDevDesc() function, which can lead to a denial of service (DOS) when a malformed USB device packet is received.Recommendations:
For versions 1.8.0 and below, consider disabling the
USBH ParseDevDesc() function until a patch is available to prevent potential denial of service attacks. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾