Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-24585

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Published

2023-11-14T10:15:26.303

Last Modified

2024-11-21T07:48:10.920

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application silabs gecko_software_development_kit 4.3.1 Yes
Application weston-embedded cesium_net 3.07.01 Yes
Application weston-embedded uc-http 3.01.01 Yes
References