Read the docs

STMicroelectronics

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

STMicroelectronics records in CISA KEV

No STMicroelectronics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in X-cube-azrtos-l4 · all components

Priority MEDIUM 45

A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01115 Published 2025-04-02 No fix listed CWE-119
Priority LOW 34

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-04-02 No fix listed CWE-191
Priority LOW 34

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-04-02 No fix listed CWE-191
Priority LOW 34

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-04-02 No fix listed CWE-191
Priority LOW 34

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-04-02 No fix listed CWE-191
Open these records in search →