CVE-2024-45064

moderate-risk
Published 2025-04-02

A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Do I need to act?

-
0.66% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.5/10 High
NETWORK / HIGH complexity

Affected Products (10)

X-Cube-Azrt-H7Rs
X-Cube-Azrtos-F4
X-Cube-Azrtos-F7
X-Cube-Azrtos-G0
X-Cube-Azrtos-G4
X-Cube-Azrtos-H7
X-Cube-Azrtos-L4
X-Cube-Azrtos-L5
X-Cube-Azrtos-Wb
X-Cube-Azrtos-Wl

Affected Vendors

St

References (2)

Exploit https://talosintelligence.com/vulnerability_reports/TALOS-2024-2096
Exploit https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2096
43
/ 100
moderate-risk
Severity 25/34 · High
Exploitability 2/34 · Minimal
Exposure 16/34 · Moderate