VULNERABILITY INTELLIGENCE

CVE-2024-42385

CVSS score4 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2024-11-18
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Weakness classification

  • prodsec@nozominetworks.com: CWE-140
  • nvd@nist.gov: NVD-CWE-Other

Primary references