PT-2025-14499 · Stmicroelectronics · X-Cube-Azrtos-Wl

·

CVE-2024-45064

·

Published

2025-04-02

·

Updated

2025-05-28

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions STMicroelectronics X-CUBE-AZRTOS-WL version 2.0.0
Description A buffer overflow issue exists in the FileX Internal RAM interface functionality, allowing code execution through specially crafted network packets. An attacker can trigger this issue by sending a sequence of requests.
Recommendations For STMicroelectronics X-CUBE-AZRTOS-WL version 2.0.0, consider disabling the FileX Internal RAM interface functionality until a patch is available to prevent potential code execution. Restrict access to the network to minimize the risk of exploitation by crafted network packets.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-45064

Affected Products

X-Cube-Azrtos-Wl