silabs micrium uc-http vulnerabilities

Latest silabs micrium uc-http CVEs

Newest publication first

1. CVE-2022-24942 Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution

   Published 2022-11-02

   Critical·CVSS 9.8 EPSS 2.4%

   Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request.

2. CVE-2020-13582 A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP reque...

   Published 2021-01-26

   High·CVSS 7.5 EPSS 2.6%

   A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.