CVE-2024-42385 | Nozomi Networks Labs

Summary

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Impact

This vulnerability trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Issue Date

November 14, 2024

Affects

This issue affects Mongoose Web Server v7.14

CVE Name

CVE-2024-42385

CVSS Details

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

CVSS Score

4.0

Solution

It is highly recommended to not expose the vulnerable component inside an untrusted network.

Mitigations

Acknowledgements

Gabriele Quagliarella of Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more